Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0160-1

Опубликовано: 18 янв. 2016
Источник: suse-cvrf

Описание

Security update for tiff

This update to tiff 4.0.6 fixes the following issues:

  • CVE-2015-7554: Out-of-bounds write in the thumbnail and tiffcmp tools allowed attacker to cause a denial of service or have unspecified further impact (bsc#960341)
  • bsc#942690: potential out-of-bound write in NeXTDecode() (#2508)

Список пакетов

SUSE Linux Enterprise Desktop 12
libtiff5-4.0.6-19.1
libtiff5-32bit-4.0.6-19.1
SUSE Linux Enterprise Desktop 12 SP1
libtiff5-4.0.6-19.1
libtiff5-32bit-4.0.6-19.1
SUSE Linux Enterprise Server 12
libtiff5-4.0.6-19.1
libtiff5-32bit-4.0.6-19.1
tiff-4.0.6-19.1
SUSE Linux Enterprise Server 12 SP1
libtiff5-4.0.6-19.1
libtiff5-32bit-4.0.6-19.1
tiff-4.0.6-19.1
SUSE Linux Enterprise Server for SAP Applications 12
libtiff5-4.0.6-19.1
libtiff5-32bit-4.0.6-19.1
tiff-4.0.6-19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libtiff5-4.0.6-19.1
libtiff5-32bit-4.0.6-19.1
tiff-4.0.6-19.1
SUSE Linux Enterprise Software Development Kit 12
libtiff-devel-4.0.6-19.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libtiff-devel-4.0.6-19.1

Ссылки

Описание

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libtiff5-32bit-4.0.6-19.1
SUSE Linux Enterprise Desktop 12 SP1:libtiff5-4.0.6-19.1
SUSE Linux Enterprise Desktop 12:libtiff5-32bit-4.0.6-19.1
SUSE Linux Enterprise Desktop 12:libtiff5-4.0.6-19.1
Ссылки
Уязвимость SUSE-SU-2016:0160-1