Skip to content
OpenAdvisories
Unscored RHSA-2012:1590 4 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client libtiff 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client libtiff-debuginfo 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff-debuginfo 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff-devel 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server libtiff 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server libtiff-debuginfo 0:3.8.2-18.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server libtiff-devel 0:3.8.2-18.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client libtiff 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client libtiff-debuginfo 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client libtiff-devel 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client libtiff-static 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff-debuginfo 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff-devel 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff-static 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server libtiff 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server libtiff-debuginfo 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server libtiff-devel 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server libtiff-static 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff-debuginfo 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff-devel 0:3.9.4-9.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff-static 0:3.9.4-9.el6_3

Vulnerabilities 4

  • Unscored —
    CVE-2012-3401

    The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initializ…

    tiff Debian
  • Unscored —
    CVE-2012-4447

    Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of servi…

    tiff Debian
  • Unscored —
    CVE-2012-4564 EPSS 14%

    ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a den…

    tiff Debian
  • Unscored —
    CVE-2012-5581

    Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (…

    tiff Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=837577
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=860198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=867235
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=871700
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1590.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-3401
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3401
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3401
  • report
    https://access.redhat.com/security/cve/CVE-2012-4447
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4447
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4447
  • report
    https://access.redhat.com/security/cve/CVE-2012-4564
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4564
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4564
  • report
    https://access.redhat.com/security/cve/CVE-2012-5581
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-5581
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-5581