Skip to content
OpenAdvisories
Unscored RHSA-2014:0223 6 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client libtiff 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client libtiff-debuginfo 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff-debuginfo 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libtiff-devel 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server libtiff 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server libtiff-debuginfo 0:3.8.2-19.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server libtiff-devel 0:3.8.2-19.el5_10

Vulnerabilities 6

  • Unscored —
    CVE-2013-1960 EPSS 12%

    Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remot…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2013-1961

    Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attack…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2013-4231

    Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds wr…

    tiff Debian
  • Unscored —
    CVE-2013-4232

    Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote…

    tiff Debian
  • Unscored —
    CVE-2013-4243

    Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2013-4244

    The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a de…

    tiff Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=952131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=952158
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=995965
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=995975
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=996052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=996468
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0223.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1960
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1960
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1960
  • report
    https://access.redhat.com/security/cve/CVE-2013-1961
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1961
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1961
  • report
    https://access.redhat.com/security/cve/CVE-2013-4231
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4231
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4231
  • report
    https://access.redhat.com/security/cve/CVE-2013-4232
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4232
  • report
    https://access.redhat.com/security/cve/CVE-2013-4243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4243
  • report
    https://access.redhat.com/security/cve/CVE-2013-4244
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4244
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4244