The tiff library and tools were updated to version 4.0.7 fixing various bug and security issues.

  - CVE-2014-8127: out-of-bounds read with malformed TIFF     image in multiple tools [bnc#914890]

  - CVE-2016-9297: tif_dirread.c read outside buffer in
    _TIFFPrintField() [bnc#1010161]

  - CVE-2016-3658: Illegal read in     TIFFWriteDirectoryTagLongLong8Array function in tiffset     / tif_dirwrite.c [bnc#974840]

  - CVE-2016-9273: heap overflow [bnc#1010163]

  - CVE-2016-3622: divide By Zero in the tiff2rgba tool     [bnc#974449]

  - CVE-2016-5652: tiff2pdf JPEG Compression Tables Heap     Buffer Overflow [bnc#1007280]

  - CVE-2016-9453: out-of-bounds Write memcpy and less bound     check in tiff2pdf [bnc#1011107]

  - CVE-2016-5875: heap-based buffer overflow when using the     PixarLog compressionformat [bnc#987351]

  - CVE-2016-9448: regression introduced by fixing     CVE-2016-9297 [bnc#1011103]

  - CVE-2016-5321: out-of-bounds read in tiffcrop /     DumpModeDecode() function [bnc#984813]

  - CVE-2016-5323: Divide-by-zero in _TIFFFax3fillruns()     function (null ptr dereference?) [bnc#984815]

This update was imported from the SUSE:SLE-12:Update update project.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The (1) putcontig8bitYCbCr21tile function in     tif_getimage.c or (2) NeXTDecode function in tif_next.c     in LibTIFF allows remote attackers to cause a denial of     service (uninitialized memory access) via a crafted     TIFF image, as demonstrated by libtiff-cvs-1.tif and     libtiff-cvs-2.tif.(CVE-2014-8127,CVE-2014-8129,CVE-2014
    -8130,CVE-2014-9655)

  - A flaw was discovered in the bmp2tiff utility. By     tricking a user into processing a specially crafted     file, a remote attacker could exploit this flaw to     cause a crash or memory corruption and, possibly,     execute arbitrary code with the privileges of the user     running the libtiff     tool.(CVE-2014-9330,CVE-2015-7554,CVE-2015-8668,CVE-201     5-8665,CVE-2015-8781,CVE-2016-3632,CVE-2016-3945,CVE-20     16-3990,CVE-2016-3991,CVE-2016-5320,CVE-2016-5652,CVE-2     015-8683)

  - tools/tiffcp.c in libtiff has an out-of-bounds write on     tiled images with odd tile width versus image width.
    Reported as MSVR 35103, aka 'cpStripToTile     heap-buffer-overflow.'(CVE-2016-9540)

  - tif_predict.h and tif_predict.c in libtiff have     assertions that can lead to assertion failures in debug     mode, or buffer overflows in release mode, when dealing     with unusual tile size like YCbCr with subsampling.
    Reported as MSVR 35105, aka 'Predictor     heap-buffer-overflow.'(CVE-2016-9535,CVE-2016-9533,CVE-     2016-9534,CVE-2016-9536,CVE-2016-9537)

  - The NeXTDecode function in tif_next.c in LibTIFF allows     remote attackers to cause a denial of service     (uninitialized memory access) via a crafted TIFF image,     as demonstrated by libtiff5.tif.(CVE-2015-1547)

  - The NeXTDecode function in tif_next.c in LibTIFF allows     remote attackers to cause a denial of service     (out-of-bounds write) via a crafted TIFF image, as     demonstrated by libtiff5.tif.(CVE-2015-8784)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated libtiff packages fix security vulnerabilities :

The libtiff image decoder library contains several issues that could cause the decoder to crash when reading crafted TIFF images (CVE-2014-8127, CVE-2014-8128, CVE-2014-8129, CVE-2014-8130, CVE-2014-9655, CVE-2015-1547).

tiff was updated to version 4.0.4 to fix six security issues found by fuzzing initiatives.

These security issues were fixed :

  - CVE-2014-8127: Out-of-bounds write (bnc#914890).

  - CVE-2014-9655: Access of uninitialized memory     (bnc#916927).

  - CVE-2014-8130: Out-of-bounds write (bnc#914890).

  - CVE-2015-1547: Use of uninitialized memory in NeXTDecode     (bnc#916925).

  - CVE-2014-8129: Out-of-bounds write (bnc#914890).

  - CVE-2014-8128: Out-of-bounds write (bnc#914890).

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1546 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a     crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against     libtiff into processing specially crafted files. (CVE-2014-9655, CVE-2015-1547, CVE-2015-8784,     CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2016-3990, CVE-2016-5320)

    * Multiple flaws have been discovered in various libtiff tools (bmp2tiff, pal2rgb, thumbnail, tiff2bw,     tiff2pdf, tiffcrop, tiffdither, tiffsplit, tiff2rgba). By tricking a user into processing a specially     crafted file, a remote attacker could exploit these flaws to cause a crash or memory corruption and,     possibly, execute arbitrary code with the privileges of the user running the libtiff tool. (CVE-2014-8127,     CVE-2014-8129, CVE-2014-8130, CVE-2014-9330, CVE-2015-7554, CVE-2015-8668, CVE-2016-3632, CVE-2016-3945,     CVE-2016-3991)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2016:1547-1 advisory.

    Security Fix(es):
    * Multiple flaws have been discovered in libtiff. A remote attacker could     exploit these flaws to cause a crash or memory corruption and, possibly,     execute arbitrary code by tricking an application linked against libtiff     into processing specially crafted files. (CVE-2014-9655, CVE-2015-1547,     CVE-2015-8784, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782,     CVE-2015-8783, CVE-2016-3990, CVE-2016-5320)
    * Multiple flaws have been discovered in various libtiff tools (bmp2tiff,     pal2rgb, thumbnail, tiff2bw, tiff2pdf, tiffcrop, tiffdither, tiffsplit,     tiff2rgba). By tricking a user into processing a specially crafted file, a     remote attacker could exploit these flaws to cause a crash or memory     corruption and, possibly, execute arbitrary code with the privileges of     the user running the libtiff tool. (CVE-2014-8127, CVE-2014-8129,     CVE-2014-8130, CVE-2014-9330, CVE-2015-7554, CVE-2015-8668, CVE-2016-3632,     CVE-2016-3945, CVE-2016-3991)


Tenable has extracted the preceding description block directly from the Scientific Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files.
(CVE-2014-9655 , CVE-2015-1547 , CVE-2015-8784 , CVE-2015-8683 , CVE-2015-8665 , CVE-2015-8781 , CVE-2015-8782 , CVE-2015-8783 , CVE-2016-3990 , CVE-2016-5320)

Multiple flaws have been discovered in various libtiff tools (bmp2tiff, pal2rgb, thumbnail, tiff2bw, tiff2pdf, tiffcrop, tiffdither, tiffsplit, tiff2rgba). By tricking a user into processing a specially crafted file, a remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code with the privileges of the user running the libtiff tool.
(CVE-2014-8127 , CVE-2014-8129 , CVE-2014-8130 , CVE-2014-9330 , CVE-2015-7554 , CVE-2015-8668 , CVE-2016-3632 , CVE-2016-3945 , CVE-2016-3991)

New libtiff packages are available for Slackware 14.2 and -current to fix security issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
96378	openSUSE Security Update : tiff (openSUSE-2017-53)	Nessus	SuSE Local Security Checks	2017/1/10	2026/1/6	high
99888	EulerOS 2.0 SP2 : compat-libtiff3 (EulerOS-SA-2017-1043)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical
82400	Mandriva Linux Security Advisory : libtiff (MDVSA-2015:147-1)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	medium
84655	openSUSE Security Update : tiff (openSUSE-2015-476)	Nessus	SuSE Local Security Checks	2015/7/13	2021/1/19	high
92696	RHEL 7 : libtiff (RHSA-2016:1546)	Nessus	Red Hat Local Security Checks	2016/8/3	2025/8/29	critical
92698	Scientific Linux Security Update : libtiff on 6.x i686/x86_64 (2016:1547)	Nessus	Scientific Linux Local Security Checks	2016/8/3	2025/8/29	critical
93011	Amazon Linux AMI : libtiff (ALAS-2016-733)	Nessus	Amazon Linux Local Security Checks	2016/8/18	2026/1/28	critical
99249	Slackware 14.2 / current : libtiff (SSA:2017-098-01)	Nessus	Slackware Local Security Checks	2017/4/10	2025/12/26	high

偵測

搜尋 Plugin

high

critical

medium

high

critical

critical

critical

high