Most recent entries from all

ALSA-2020:4634 — Moderate: libtiff security update

Affected: AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03591

Withdrawn: BELL-CVE-2019-17546 — CVE-2019-17546 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-1103

cnvd-2020-13553

EUVD-2026-207461

fkie_cve-2019-17546

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.

GHSA-24m4-fmx6-c2q6

gsd-2019-17546

openSUSE-SU-2022:0480-1 — Security update for tiff

Security update for tiff

SUSE-SU-2022:0480-1 — Security update for tiff

Security update for tiff

UBUNTU-CVE-2019-17546

Affected: Ubuntu:Pro:14.04:LTS: gdal, Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:16.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: gdal, Ubuntu:16.04:LTS: qtimageformats-opensource-src, Ubuntu:18.04:LTS: tiff, Ubuntu:18.04:LTS: neuron, Ubuntu:18.04:LTS: qtimageformats-opensource-src, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker and 19 more

WID-SEC-W-2023-0271 — libTIFF: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service Zustand herzustellen.