Most recent entries from all

ALSA-2024:2289 — Moderate: libtiff security update

Affected: AlmaLinux:9: libtiff, AlmaLinux:9: libtiff-devel, AlmaLinux:9: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090) * libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618) * libtiff: integer overflow in tiffcp.c (CVE-2023-40745) * libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175) * libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-01277

BELL-CVE-2023-6228

Affected: Alpaquita:23: tiff, Alpaquita:stream: tiff, BellSoft Hardened Containers:23: tiff, BellSoft Hardened Containers:stream: tiff

certfr-2024-avi-0627 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2024-avi-0627

cnvd-2023-99174

EUVD-2026-261613

fkie_cve-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

GHSA-4v5g-xjvw-59g6

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

gsd-2023-6228

msrc_CVE-2023-6228 — Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

msrc_CVE-2023-6228

OESA-2023-1857 — libtiff security update

Affected: openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP3: libtiff, openEuler:22.03-LTS: libtiff, openEuler:22.03-LTS-SP1: libtiff, openEuler:22.03-LTS-SP2: libtiff

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): An issue was found in the tiffcp utility distributed by the libtiff package. Processing a crafted TIFF file may cause a heap-based buffer overflow, resulting in an application crash. Reference: https://gitlab.com/libtiff/libtiff/-/issues/606(CVE-2023-6228)

RHSA-2024:2289 — Red Hat Security Advisory: libtiff security update

libtiff: infinite loop via a crafted TIFF file libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c libtiff: integer overflow in tiffcp.c libtiff: potential integer overflow in raw2tiff.c

UBUNTU-CVE-2023-6228

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:16.04:LTS: libtk-img, Ubuntu:16.04:LTS: povray, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:18.04:LTS: libtk-img, Ubuntu:18.04:LTS: povray, Ubuntu:20.04:LTS: tiff, Ubuntu:20.04:LTS: libgeotiff, Ubuntu:20.04:LTS: libtk-img and 15 more

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

WID-SEC-W-2023-3169 — libTIFF: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.