Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:4053-1

Опубликовано: 08 дек. 2018
Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues:

Security issues fixed:

  • CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function (bsc#1115717).
  • CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function (bsc#1054594).
  • CVE-2016-10094: Fixed heap-based buffer overflow in the _tiffWriteProc function (bsc#1017693).
  • CVE-2016-10093: Fixed heap-based buffer overflow in the _TIFFmemcpy function (bsc#1017693).
  • CVE-2016-10092: Fixed heap-based buffer overflow in the TIFFReverseBits function (bsc#1017693).
  • CVE-2016-6223: Fixed out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() (bsc#990460).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libtiff-devel-4.0.9-lp150.4.12.1
libtiff-devel-32bit-4.0.9-lp150.4.12.1
libtiff5-4.0.9-lp150.4.12.1
libtiff5-32bit-4.0.9-lp150.4.12.1
tiff-4.0.9-lp150.4.12.1

Ссылки

Описание

Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

Затронутые продукты
openSUSE Leap 15.0:libtiff-devel-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff-devel-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-4.0.9-lp150.4.12.1
Ссылки

Описание

Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow.

Затронутые продукты
openSUSE Leap 15.0:libtiff-devel-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff-devel-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-4.0.9-lp150.4.12.1
Ссылки

Описание

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

Затронутые продукты
openSUSE Leap 15.0:libtiff-devel-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff-devel-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-4.0.9-lp150.4.12.1
Ссылки

Описание

The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.

Затронутые продукты
openSUSE Leap 15.0:libtiff-devel-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff-devel-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-4.0.9-lp150.4.12.1
Ссылки

Описание

The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation.

Затронутые продукты
openSUSE Leap 15.0:libtiff-devel-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff-devel-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-4.0.9-lp150.4.12.1
Ссылки

Описание

In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.

Затронутые продукты
openSUSE Leap 15.0:libtiff-devel-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff-devel-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-32bit-4.0.9-lp150.4.12.1
openSUSE Leap 15.0:libtiff5-4.0.9-lp150.4.12.1
Ссылки
Уязвимость openSUSE-SU-2018:4053-1