Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - libtiff 4.0.6 中的 tif_predict.h 和 tif_predict.c 存在断言，在使用子采样处理 YCbCr 等不寻常的切片大小时，可能会导致调试模式下的断言失败，或者发布模式下的缓冲区溢出。被报告为 MSVR 35105，即 Predictor 堆缓冲区溢出。 (CVE-2016-9535)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

已在 libtiff 库和随附工具中发现多个漏洞，可能会导致拒绝服务、内存泄露或任意代码执行。

libtiff 更新现可用于 Red Hat Enterprise Linux 6 和 Red Hat Enterprise Linux 7。Red Hat 产品安全团队将此更新评级为具有中等安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。libtiff 程序包中包含用于操纵标记图像文件格式 (TIFF) 文件的函数库。安全修复：* 在 libtiff 中发现多种缺陷。远程攻击者可利用这些缺陷，诱骗与 libtiff 链接的应用程序处理特制的文件，造成崩溃或内存损坏，且可能执行任意代码。(CVE-2016-9533, CVE-2016-9534, CVE-2016-9535) * 在各种 libtiff 工具 (tiff2pdf, tiffcrop, tiffcp, bmp2tiff) 中发现多个缺陷。远程攻击者可诱骗用户处理特制的文件，进而利用这些缺陷，造成崩溃或内存损坏，且可能以运行 libtiff 工具的用户的权限执行任意代码。(CVE-2015-8870, CVE-2016-5652, CVE-2016-9540, CVE-2016-9537, CVE-2016-9536)

An update for libtiff is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es) :

* Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files.
(CVE-2016-9533, CVE-2016-9534, CVE-2016-9535)

* Multiple flaws have been discovered in various libtiff tools (tiff2pdf, tiffcrop, tiffcp, bmp2tiff). By tricking a user into processing a specially crafted file, a remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code with the privileges of the user running the libtiff tool. (CVE-2015-8870, CVE-2016-5652, CVE-2016-9540, CVE-2016-9537, CVE-2016-9536)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for libtiff is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es) :

* Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files.
(CVE-2016-9533, CVE-2016-9534, CVE-2016-9535)

* Multiple flaws have been discovered in various libtiff tools (tiff2pdf, tiffcrop, tiffcp, bmp2tiff). By tricking a user into processing a specially crafted file, a remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code with the privileges of the user running the libtiff tool. (CVE-2015-8870, CVE-2016-5652, CVE-2016-9540, CVE-2016-9537, CVE-2016-9536)

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service, memory disclosure or the execution of arbitrary code.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in     debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with     subsampling. Reported as MSVR 35105, aka Predictor heap-buffer-overflow. (CVE-2016-9535)

Note that Nessus relies on the presence of the package as reported by the vendor.

在 libtiff 中發現多個缺陷。遠端攻擊者可惡意利用這些缺陷，誘騙與 libtiff 連結的應用程式處理特製檔案，造成當機或記憶體損毀，且可能執行任意程式碼。(CVE-2016-9533、CVE-2016-9534、CVE-2016-9535) 在幾個 libtiff 工具 (tiff2pdf、tiffcrop、tiffcp、bmp2tiff) 中，發現多個缺陷。遠端攻擊者可誘騙使用者處理特製的檔案，進而惡意利用這些缺陷，造成當機或記憶體損毀，且可能以執行 libtiff 工具之使用者的權限，執行任意程式碼。(CVE-2015-8870、CVE-2016-5652、CVE-2016-9540、CVE-2016-9537、CVE-2016-9536)

據發現，LibTIFF 未正確處理格式錯誤的特定影像。如果使用者或自動化系統遭誘騙而開啟特製影像，遠端攻擊者可能造成應用程式損毀，從而導致拒絕服務，或可能以使用者權限執行任意程式碼。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端主機執行的 macOS 是 10.12.4 之前的 10.12.x 版。因此會受到多個元件中的多個弱點影響，其中有些是遠端程式碼執行弱點。未經驗證的遠端攻擊者可惡意利用這些遠端程式碼執行弱點，誘騙使用者造訪特製的網站，進而導致在目前使用者的內容中執行任意程式碼。受影響的元件如下：- apache - apache_mod_php - AppleGraphicsPowerManagement - AppleRAID - Audio - Bluetooth - Carbon - CoreGraphics - CoreMedia - CoreText - curl - EFI - FinderKit - FontParser - HTTPProtocol - Hypervisor - iBooks - ImageIO - Intel Graphics Driver - IOATAFamily - IOFireWireAVC - IOFireWireFamily - Kernel - Keyboards - libarchive - libc++abi - LibreSSL - MCX Client - Menus - Multi-Touch - OpenSSH - OpenSSL - Printing - python - QuickTime - Security - SecurityFoundation - sudo - System Integrity Protection - tcpdump - tiffutil - WebKit

libtiff project reports :

Multiple flaws have been discovered in libtiff library and utilities.

Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files.
(CVE-2016-9533 , CVE-2016-9534 , CVE-2016-9535)

Multiple flaws have been discovered in various libtiff tools (tiff2pdf, tiffcrop, tiffcp, bmp2tiff). By tricking a user into processing a specially crafted file, a remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code with the privileges of the user running the libtiff tool. (CVE-2015-8870 , CVE-2016-5652 , CVE-2016-9540 , CVE-2016-9537 , CVE-2016-9536)

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The (1) putcontig8bitYCbCr21tile function in     tif_getimage.c or (2) NeXTDecode function in tif_next.c     in LibTIFF allows remote attackers to cause a denial of     service (uninitialized memory access) via a crafted     TIFF image, as demonstrated by libtiff-cvs-1.tif and     libtiff-cvs-2.tif.(CVE-2014-8127,CVE-2014-8129,CVE-2014
    -8130,CVE-2014-9655)

  - A flaw was discovered in the bmp2tiff utility. By     tricking a user into processing a specially crafted     file, a remote attacker could exploit this flaw to     cause a crash or memory corruption and, possibly,     execute arbitrary code with the privileges of the user     running the libtiff     tool.(CVE-2014-9330,CVE-2015-7554,CVE-2015-8668,CVE-201     5-8665,CVE-2015-8781,CVE-2016-3632,CVE-2016-3945,CVE-20     16-3990,CVE-2016-3991,CVE-2016-5320,CVE-2016-5652,CVE-2     015-8683)

  - tools/tiffcp.c in libtiff has an out-of-bounds write on     tiled images with odd tile width versus image width.
    Reported as MSVR 35103, aka 'cpStripToTile     heap-buffer-overflow.'(CVE-2016-9540)

  - tif_predict.h and tif_predict.c in libtiff have     assertions that can lead to assertion failures in debug     mode, or buffer overflows in release mode, when dealing     with unusual tile size like YCbCr with subsampling.
    Reported as MSVR 35105, aka 'Predictor     heap-buffer-overflow.'(CVE-2016-9535,CVE-2016-9533,CVE-     2016-9534,CVE-2016-9536,CVE-2016-9537)

  - The NeXTDecode function in tif_next.c in LibTIFF allows     remote attackers to cause a denial of service     (uninitialized memory access) via a crafted TIFF image,     as demonstrated by libtiff5.tif.(CVE-2015-1547)

  - The NeXTDecode function in tif_next.c in LibTIFF allows     remote attackers to cause a denial of service     (out-of-bounds write) via a crafted TIFF image, as     demonstrated by libtiff5.tif.(CVE-2015-8784)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3212-1 advisory.

    It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system     were tricked into opening a specially crafted image, a remote attacker could crash the application,     leading to a denial of service, or possibly execute arbitrary code with user privileges.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user. The affected components are as follows :

  - apache
  - apache_mod_php
  - AppleGraphicsPowerManagement
  - AppleRAID
  - Audio
  - Bluetooth
  - Carbon
  - CoreGraphics
  - CoreMedia
  - CoreText
  - curl
  - EFI
  - FinderKit
  - FontParser
  - HTTPProtocol
  - Hypervisor
  - iBooks
  - ImageIO
  - Intel Graphics Driver
  - IOATAFamily
  - IOFireWireAVC
  - IOFireWireFamily
  - Kernel
  - Keyboards
  - libarchive
  - libc++abi
  - LibreSSL
  - MCX Client
  - Menus
  - Multi-Touch
  - OpenSSH
  - OpenSSL
  - Printing
  - python
  - QuickTime
  - Security
  - SecurityFoundation
  - sudo
  - System Integrity Protection
  - tcpdump
  - tiffutil
  - WebKit

ID	名稱	產品	系列	已發布	已更新	嚴重性
220340	Linux Distros 未修补的漏洞: CVE-2016-9535	Nessus	Misc.	2025/3/4	2025/8/25	critical
99973	Debian DSA-3844-1：tiff - 安全更新	Nessus	Debian Local Security Checks	2017/5/4	2021/1/11	critical
96929	CentOS 6 / 7 : libtiff (CESA-2017:0225)	Nessus	CentOS Local Security Checks	2017/2/2	2021/1/4	critical
101417	Virtuozzo 7 : libtiff / libtiff-devel / libtiff-static / etc (VZLSA-2017-0225)	Nessus	Virtuozzo Local Security Checks	2017/7/13	2021/1/4	critical
96929	CentOS 6 / 7 : libtiff (CESA-2017:0225)	Nessus	CentOS Local Security Checks	2017/2/2	2021/1/4	critical
99973	Debian DSA-3844-1 : tiff - security update	Nessus	Debian Local Security Checks	2017/5/4	2021/1/11	critical
220340	Linux Distros Unpatched Vulnerability : CVE-2016-9535	Nessus	Misc.	2025/3/4	2025/8/25	critical
97554	Amazon Linux AMI：libtiff / compat-libtiff3 (ALAS-2017-802)	Nessus	Amazon Linux Local Security Checks	2017/3/7	2018/4/18	critical
97434	Ubuntu 14.04 LTS / 16.04 LTS：LibTIFF 弱點 (USN-3212-1)	Nessus	Ubuntu Local Security Checks	2017/2/28	2024/8/27	critical
99134	macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)	Nessus	MacOS X Local Security Checks	2017/3/31	2019/11/13	critical
97035	FreeBSD : tiff -- multiple vulnerabilities (fb74eacc-ec8a-11e6-bc8a-0011d823eebd)	Nessus	FreeBSD Local Security Checks	2017/2/7	2021/1/4	critical
97554	Amazon Linux AMI : libtiff / compat-libtiff3 (ALAS-2017-802)	Nessus	Amazon Linux Local Security Checks	2017/3/7	2018/4/18	critical
99889	EulerOS 2.0 SP1 : compat-libtiff3 (EulerOS-SA-2017-1044)	Nessus	Huawei Local Security Checks	2017/5/1	2021/4/19	critical
97434	Ubuntu 14.04 LTS / 16.04 LTS : LibTIFF vulnerabilities (USN-3212-1)	Nessus	Ubuntu Local Security Checks	2017/2/28	2024/8/27	critical
99134	macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)	Nessus	MacOS X Local Security Checks	2017/3/31	2019/11/13	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical