[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2017:1044-1 -- SLES tiff, libtiff5

ID: oval:org.secpod.oval:def:89044686Date: (C)2021-07-07   (M)2024-04-17
Class: PATCHFamily: unix




This update for tiff fixes the following issues: Security issues fixed: - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to WRITE of size 2048 and libtiff/tif_next.c:64:9 . - CVE-2016-10271: tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 1 and libtiff/tif_fax3.c:413:13 . - CVE-2016-10270: LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 8 and libtiff/tif_read.c:523:22 . - CVE-2016-10269: LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 512 and libtiff/tif_unix.c:340:2 . - CVE-2016-10268: tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 78490 and libtiff/tif_unix.c:115:23 . - CVE-2016-10267: LibTIFF 4.0.7 allows remote attackers to cause a denial of service via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8 . - CVE-2016-10266: LibTIFF 4.0.7 allows remote attackers to cause a denial of service via a crafted TIFF image, related to libtiff/tif_read.c:351:22. .

Platform:
SUSE Linux Enterprise Server 12 SP2
Product:
tiff
libtiff5
Reference:
SUSE-SU-2017:1044-1
CVE-2016-10266
CVE-2016-10267
CVE-2016-10268
CVE-2016-10269
CVE-2016-10270
CVE-2016-10271
CVE-2016-10272
CVE    7
CVE-2016-10272
CVE-2016-10271
CVE-2016-10270
CVE-2016-10269
...
CPE    3
cpe:/o:suse:suse_linux_enterprise_server:12:sp2
cpe:/a:tiff:tiff
cpe:/a:libtiff5:libtiff5

© SecPod Technologies