Most recent entries from all

ALSA-2021:4241 — Moderate: libtiff security and bug fix update

Affected: AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

* libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521)

* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-01527

Withdrawn: BELL-CVE-2020-35524 — CVE-2020-35524 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-1103

EUVD-2026-47629

fkie_cve-2020-35524

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

GHSA-7xc8-4h5p-pc25

gsd-2020-35524

msrc_CVE-2020-35524 — A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A spe…

msrc_CVE-2020-35524

OESA-2021-1112 — libtiff security update

Affected: openEuler:20.03-LTS: libtiff

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es):

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.(CVE-2020-35521)

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.(CVE-2020-35522) An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35523) A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35524)

openSUSE-SU-2022:0480-1 — Security update for tiff

Security update for tiff

SUSE-SU-2022:0480-1 — Security update for tiff

Security update for tiff

UBUNTU-CVE-2020-35524

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff

WID-SEC-W-2022-0914 — libTIFF: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.