Skip to content
OpenAdvisories
Unscored RHSA-2006:0603 8 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as libtiff 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::as libtiff-debuginfo 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::as libtiff-devel 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff-debuginfo 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff-devel 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::es libtiff 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::es libtiff-debuginfo 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::es libtiff-devel 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff-debuginfo 0:3.5.7-25.el3.4
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff-devel 0:3.5.7-25.el3.4
Red Hat · RHEL 4 enterprise_linux:4::as libtiff 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::as libtiff-debuginfo 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::as libtiff-devel 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff-debuginfo 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff-devel 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::es libtiff 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::es libtiff-debuginfo 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::es libtiff-devel 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff-debuginfo 0:3.6.1-12
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff-devel 0:3.6.1-12

Vulnerabilities 8

  • Unscored —
    CVE-2006-2656 Public exploit EPSS 14%

    Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execut…

    tiff Debian
  • Unscored —
    CVE-2006-3459 Public exploit EPSS 56%

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and oth…

    tiff Debian
  • Unscored —
    CVE-2006-3460

    Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent atta…

    tiff Debian
  • Unscored —
    CVE-2006-3461

    Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-depen…

    tiff Debian
  • Unscored —
    CVE-2006-3462

    Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-depen…

    tiff Debian
  • Unscored —
    CVE-2006-3463

    The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating…

    tiff Debian
  • Unscored —
    CVE-2006-3464

    TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execut…

    tiff Debian
  • Unscored —
    CVE-2006-3465

    Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers…

    tiff Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=199111
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0603.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-2656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=193166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2656
  • report
    https://access.redhat.com/security/cve/CVE-2006-3459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3459
  • report
    https://access.redhat.com/security/cve/CVE-2006-3460
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3460
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3460
  • report
    https://access.redhat.com/security/cve/CVE-2006-3461
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3461
  • report
    https://access.redhat.com/security/cve/CVE-2006-3462
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3462
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3462
  • report
    https://access.redhat.com/security/cve/CVE-2006-3463
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3463
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3463
  • report
    https://access.redhat.com/security/cve/CVE-2006-3464
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3464
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3464
  • report
    https://access.redhat.com/security/cve/CVE-2006-3465
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3465
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3465