According to the versions of the libtiff package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - ChopUpSingleUncompressedStrip in tif_dirread.c in     LibTIFF 4.0.9 allows remote attackers to cause a denial     of service (heap-based buffer overflow and application     crash) or possibly have unspecified other impact via a     crafted TIFF file, as demonstrated by     tiff2pdf.(CVE-2018-15209)

  - newoffsets handling in ChopUpSingleUncompressedStrip in     tif_dirread.c in LibTIFF 4.0.9 allows remote attackers     to cause a denial of service (heap-based buffer     overflow and application crash) or possibly have     unspecified other impact via a crafted TIFF file, as     demonstrated by tiff2pdf. This is a different     vulnerability than CVE-2018-15209.(CVE-2018-16335)

  - In LibTIFF 4.0.9, there is an uncontrolled resource     consumption in the TIFFSetDirectory function of     tif_dir.c. Remote attackers could leverage this     vulnerability to cause a denial of service via a     crafted tif file. This occurs because the declared     number of directory entries is not validated against     the actual number of directory entries.(CVE-2018-5784)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_5079 advisory.

    * libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)

    * libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)

    * libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)

    * libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service     (CVE-2023-52356)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5079 advisory.

    - Fix CVE-2023-6228 CVE-2023-52356 CVE-2023-25433 CVE-2018-15209

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0780 advisory.

    This advisory aggregates security fixes for the libtiff SRPM in CIQ LTS 8.8. It addresses 4 CVEs:
    CVE-2023-6228, CVE-2018-15209, CVE-2023-25433, CVE-2023-52356.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0781 advisory.

    This advisory aggregates security fixes for the libtiff SRPM in CIQ LTS 8.6. It addresses 6 CVEs:
    CVE-2023-6228, CVE-2018-15209, CVE-2023-25433, CVE-2023-52356, CVE-2022-4645, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
140333	EulerOS Virtualization for ARM 64 3.0.2.0 : libtiff (EulerOS-SA-2020-1963)	Nessus	Huawei Local Security Checks	2020/9/8	2024/2/21	high
355321	Rocky Linux 8 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc Multiple Vulnerabilities (crlsa-2024_5079)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
205162	Oracle Linux 8 : libtiff (ELSA-2024-5079)	Nessus	Oracle Linux Local Security Checks	2024/8/7	2025/9/9	high
354222	Rocky Linux 8.8 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc Multiple Vulnerabilities (ciqsa-2026_0780)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
355818	Rocky Linux 8.6 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc Multiple Vulnerabilities (ciqsa-2026_0781)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

检测

插件搜索

high

high

high

high

high