Skip to content
OpenAdvisories
Unscored RHSA-2010:0519 6 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as libtiff 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::as libtiff-debuginfo 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::as libtiff-devel 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff-debuginfo 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff-devel 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es libtiff 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es libtiff-debuginfo 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es libtiff-devel 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff-debuginfo 0:3.6.1-12.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff-devel 0:3.6.1-12.el4_8.5
Red Hat · RHEL 5 enterprise_linux:5::client libtiff 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client libtiff-debuginfo 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client libtiff-devel 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff-debuginfo 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff-devel 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server libtiff 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server libtiff-debuginfo 0:3.8.2-7.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server libtiff-devel 0:3.8.2-7.el5_5.5

Vulnerabilities 6

  • Unscored —
    CVE-2010-1411 Public exploit EPSS 13%

    Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as…

    tiff Debian
  • Unscored —
    CVE-2010-2481

    The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries,…

    tiff Debian
  • Unscored —
    CVE-2010-2483

    The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read…

    tiff Debian
  • Unscored —
    CVE-2010-2595

    The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid Refere…

    tiff Debian
  • Unscored —
    CVE-2010-2597

    The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField functio…

    tiff Debian
  • Unscored —
    CVE-2010-4665

    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attacker…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=592361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=610684
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=610776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=611895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=611900
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0519.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1411
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1411
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1411
  • report
    https://access.redhat.com/security/cve/CVE-2010-2481
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2481
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2481
  • report
    https://access.redhat.com/security/cve/CVE-2010-2483
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2483
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2483
  • report
    https://access.redhat.com/security/cve/CVE-2010-2595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2595
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2595
  • report
    https://access.redhat.com/security/cve/CVE-2010-2597
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2597
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2597
  • report
    https://access.redhat.com/security/cve/CVE-2010-4665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=695887
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4665
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4665