SUSE-SU-2017:1044-1 -- SLES tiff, libtiff5ID: oval:org.secpod.oval:def:89044686 | Date: (C)2021-07-07 (M)2024-04-17 |
Class: PATCH | Family: unix |
This update for tiff fixes the following issues: Security issues fixed: - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to WRITE of size 2048 and libtiff/tif_next.c:64:9 . - CVE-2016-10271: tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 1 and libtiff/tif_fax3.c:413:13 . - CVE-2016-10270: LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 8 and libtiff/tif_read.c:523:22 . - CVE-2016-10269: LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 512 and libtiff/tif_unix.c:340:2 . - CVE-2016-10268: tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted TIFF image, related to READ of size 78490 and libtiff/tif_unix.c:115:23 . - CVE-2016-10267: LibTIFF 4.0.7 allows remote attackers to cause a denial of service via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8 . - CVE-2016-10266: LibTIFF 4.0.7 allows remote attackers to cause a denial of service via a crafted TIFF image, related to libtiff/tif_read.c:351:22. .
Platform: |
SUSE Linux Enterprise Server 12 SP2 |