Skip to content
OpenAdvisories
Unscored RHSA-2016:1546 19 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client libtiff 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client libtiff-debuginfo 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client libtiff-devel 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client libtiff-static 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client libtiff-tools 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode libtiff 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode libtiff-debuginfo 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode libtiff-devel 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode libtiff-static 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode libtiff-tools 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server libtiff 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server libtiff-debuginfo 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server libtiff-devel 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server libtiff-static 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server libtiff-tools 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation libtiff 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation libtiff-debuginfo 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation libtiff-devel 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation libtiff-static 0:4.0.3-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation libtiff-tools 0:4.0.3-25.el7_2

Vulnerabilities 19

  • Unscored —
    CVE-2014-8127

    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF im…

    tiff tiff tiff Debian Ubuntu Alpine
  • Unscored —
    CVE-2014-8129

    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified o…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2014-8130

    The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to c…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2014-9330

    Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (cr…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2014-9655

    The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows …

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-1547

    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized me…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-7554

    The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8665

    tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the Sampl…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8668 EPSS 14%

    Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8683

    The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of servic…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8781

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of sampl…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8782

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a d…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8783

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8784

    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds wr…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2016-3632

    The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of …

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2016-3945

    Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2016-3990

    Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows …

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2016-3991

    Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote at…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2016-5320 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2…

    tiff tiff Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1177893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185805
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185815
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185817
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1190703
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1190709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1294417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1294425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1294427
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1294444
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1301649
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1301652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1325093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1325095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1326246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1326249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1346687
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1546.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-8127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8127
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8127
  • report
    https://access.redhat.com/security/cve/CVE-2014-8129
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8129
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8129
  • report
    https://access.redhat.com/security/cve/CVE-2014-8130
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8130
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8130
  • report
    https://access.redhat.com/security/cve/CVE-2014-9330
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9330
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9330
  • report
    https://access.redhat.com/security/cve/CVE-2014-9655
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9655
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9655
  • report
    https://access.redhat.com/security/cve/CVE-2015-1547
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1547
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1547
  • report
    https://access.redhat.com/security/cve/CVE-2015-7554
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7554