Описание
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).
- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).
- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).
- CVE-2015-8668: Fixed Heap-based buffer overflow in bmp2tiff / PackBitsEncode (bsc#960589).
Список пакетов
Image SLES12-SP5-Azure-SAP-BYOS
Image SLES12-SP5-Azure-SAP-On-Demand
Image SLES12-SP5-EC2-SAP-BYOS
Image SLES12-SP5-EC2-SAP-On-Demand
Image SLES12-SP5-GCE-SAP-BYOS
Image SLES12-SP5-GCE-SAP-On-Demand
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 12 SP5
Ссылки
- Link for SUSE-SU-2024:0915-1
- E-Mail link for SUSE-SU-2024:0915-1
- SUSE Security Ratings
- SUSE Bug 1213590
- SUSE Bug 1214686
- SUSE Bug 1214687
- SUSE Bug 1221187
- SUSE Bug 960589
- SUSE CVE CVE-2015-8668 page
- SUSE CVE CVE-2023-38288 page
- SUSE CVE CVE-2023-40745 page
- SUSE CVE CVE-2023-41175 page
Описание
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
Затронутые продукты
Ссылки
- CVE-2015-8668
- SUSE Bug 1014461
- SUSE Bug 960589
Описание
** REJECT ** Not a Security Issue.
Затронутые продукты
Ссылки
- CVE-2023-38288
- SUSE Bug 1213590
Описание
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Затронутые продукты
Ссылки
- CVE-2023-40745
- SUSE Bug 1214687
Описание
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Затронутые продукты
Ссылки
- CVE-2023-41175
- SUSE Bug 1214686