Summary
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | tiff | 4.0.3-7ubuntu0.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | tiff | 4.0.6-1ubuntu0.3 |
Vulnerabilities 27
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…
-
Unscored —
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based …
-
Unscored —
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 a…
-
Unscored —
The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a…
-
Unscored —CVE-2017-10688 Public exploit
In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. …
-
Unscored —
There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which cause…
-
Unscored —
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which a…
-
Unscored —
There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.…
-
Unscored —
There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dir…
-
Unscored —
In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated b…
-
Unscored —
The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might all…
-
Unscored —
tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attacker…
-
Unscored —
The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a den…
-
Unscored —
The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divi…
-
Unscored —
LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might al…
-
Unscored —
tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issu…
-
Unscored —
tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and appl…
-
Unscored —
LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might al…
-
Unscored —
LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which …
-
Unscored —
LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote …
-
Unscored —
LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (applicati…
-
Unscored —
In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, wh…
-
Unscored —
In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg…
-
Unscored —
In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which…
-
Unscored —CVE-2017-9936 Public exploit
In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in …
-
Unscored —
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote a…
References
-
report
https://ubuntu.com/security/CVE-2016-10266
-
report
https://ubuntu.com/security/CVE-2016-10267
-
report
https://ubuntu.com/security/CVE-2016-10268
-
report
https://ubuntu.com/security/CVE-2016-10269
-
report
https://ubuntu.com/security/CVE-2016-10371
-
report
https://ubuntu.com/security/CVE-2017-7592
-
report
https://ubuntu.com/security/CVE-2017-7593
-
report
https://ubuntu.com/security/CVE-2017-7594
-
report
https://ubuntu.com/security/CVE-2017-7595
-
report
https://ubuntu.com/security/CVE-2017-7596
-
report
https://ubuntu.com/security/CVE-2017-7597
-
report
https://ubuntu.com/security/CVE-2017-7598
-
report
https://ubuntu.com/security/CVE-2017-7599
-
report
https://ubuntu.com/security/CVE-2017-7600
-
report
https://ubuntu.com/security/CVE-2017-7601
-
report
https://ubuntu.com/security/CVE-2017-7602
-
report
https://ubuntu.com/security/CVE-2017-9403
-
report
https://ubuntu.com/security/CVE-2017-9404
-
report
https://ubuntu.com/security/CVE-2017-9815
-
report
https://ubuntu.com/security/CVE-2017-9936
-
report
https://ubuntu.com/security/CVE-2017-10688
-
report
https://ubuntu.com/security/CVE-2017-11335
-
report
https://ubuntu.com/security/CVE-2017-12944
-
report
https://ubuntu.com/security/CVE-2017-13726
-
report
https://ubuntu.com/security/CVE-2017-13727
-
report
https://ubuntu.com/security/CVE-2017-18013
-
report
https://ubuntu.com/security/CVE-2018-5784