Most recent entries from all

certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-1103

fkie_cve-2023-38289

Rejected reason: Not a Security Issue.

gsd-2023-38289

OESA-2023-1459 — libtiff security update

Affected: openEuler:20.03-LTS-SP1: libtiff

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38289)

SUSE-SU-2023:4371-1 — Security update for tiff

Security update for tiff

UBUNTU-CVE-2023-38289

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff, Ubuntu:22.04:LTS: tiff

Rejected reason: Not a Security Issue.

WID-SEC-W-2023-1858 — libTIFF: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand zu verursachen.