[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RLSA-2023:0095 --- libtiff

ID: oval:org.secpod.oval:def:4501182Date: (C)2023-03-13   (M)2023-11-23
Class: PATCHFamily: unix




The libtiff packages contain a library of functions for manipulating Tagged Image File Format files. Security Fix: * LibTiff: DoS from Divide By Zero Error * libtiff: Double free or corruption in rotateImage function at tiffcrop.c * libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c * libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits * libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c * libtiff: Assertion fail in rotateImage function at tiffcrop.c * libtiff: Invalid pointer free operation in TIFFClose at tif_close.c * libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
Rocky Linux 8
Product:
libtiff
Reference:
RLSA-2023:0095
CVE-2022-2056
CVE-2022-2057
CVE-2022-2058
CVE-2022-2519
CVE-2022-2520
CVE-2022-2521
CVE-2022-2867
CVE-2022-2868
CVE-2022-2869
CVE-2022-2953
CVE    10
CVE-2022-2521
CVE-2022-2057
CVE-2022-2058
CVE-2022-2520
...
CPE    1
cpe:/a:libtiff:libtiff

© SecPod Technologies