Skip to content
OpenAdvisories
Unscored RHSA-2014:0222 7 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client libtiff 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client libtiff-debuginfo 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client libtiff-devel 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client libtiff-static 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff-debuginfo 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff-devel 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode libtiff-static 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server libtiff 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server libtiff-debuginfo 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server libtiff-devel 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server libtiff-static 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff-debuginfo 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff-devel 0:3.9.4-10.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation libtiff-static 0:3.9.4-10.el6_5

Vulnerabilities 7

  • Unscored —
    CVE-2010-2596

    The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to …

    tiff Debian
  • Unscored —
    CVE-2013-1960 EPSS 12%

    Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remot…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2013-1961

    Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attack…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2013-4231

    Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds wr…

    tiff Debian
  • Unscored —
    CVE-2013-4232

    Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote…

    tiff Debian
  • Unscored —
    CVE-2013-4243

    Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2013-4244

    The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a de…

    tiff Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=610759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=952131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=952158
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=995965
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=995975
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=996052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=996468
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0222.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2596
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2596
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2596
  • report
    https://access.redhat.com/security/cve/CVE-2013-1960
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1960
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1960
  • report
    https://access.redhat.com/security/cve/CVE-2013-1961
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1961
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1961
  • report
    https://access.redhat.com/security/cve/CVE-2013-4231
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4231
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4231
  • report
    https://access.redhat.com/security/cve/CVE-2013-4232
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4232
  • report
    https://access.redhat.com/security/cve/CVE-2013-4243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4243
  • report
    https://access.redhat.com/security/cve/CVE-2013-4244
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4244
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4244