According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image. (CVE-2023-26965)

  - A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker     to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes     undefined behavior. This will result in an application crash, eventually leading to a denial of service.
    (CVE-2023-2908)

  - A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path     or a path that requires permissions like /dev/null) while specifying zones. (CVE-2023-3316)

  - A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a     TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes     this memory leak issue, resulting an application crash, eventually leading to a denial of service.
    (CVE-2023-3576)

  - A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a     buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
    (CVE-2023-3618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of     buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV. (CVE-2023-25433)

  - loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image. (CVE-2023-26965)

  - libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian     TIFF file and specifies the output to be big-endian. (CVE-2023-26966)

  - A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker     to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes     undefined behavior. This will result in an application crash, eventually leading to a denial of service.
    (CVE-2023-2908)

  - A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path     or a path that requires permissions like /dev/null) while specifying zones. (CVE-2023-3316)

  - A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a     TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes     this memory leak issue, resulting an application crash, eventually leading to a denial of service.
    (CVE-2023-3576)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of     buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV. (CVE-2023-25433)

  - loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image. (CVE-2023-26965)

  - libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian     TIFF file and specifies the output to be big-endian. (CVE-2023-26966)

  - A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker     to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes     undefined behavior. This will result in an application crash, eventually leading to a denial of service.
    (CVE-2023-2908)

  - A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path     or a path that requires permissions like /dev/null) while specifying zones. (CVE-2023-3316)

  - A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a     TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes     this memory leak issue, resulting an application crash, eventually leading to a denial of service.
    (CVE-2023-3576)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has libtiff packages installed that are affected by multiple vulnerabilities:

  - Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows     attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a     DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign     extended to an integer that produces more digits than expected in an sprintf call. (CVE-2006-2193)

  - Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-     dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG     stream that is longer than the scan line size (TiffScanLineSize). (CVE-2006-3460)

  - Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow     context-dependent attackers to execute arbitrary code via unknown vectors. (CVE-2006-3461)

  - Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow     context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE     images. (CVE-2006-3462)

  - The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short     when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial     of service via a large td_nstrips value, which triggers an infinite loop. (CVE-2006-3463)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image. (CVE-2023-26965)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image. (CVE-2023-26965)

  - A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker     to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes     undefined behavior. This will result in an application crash, eventually leading to a denial of service.
    (CVE-2023-2908)

  - A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path     or a path that requires permissions like /dev/null) while specifying zones. (CVE-2023-3316)

  - A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a     TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes     this memory leak issue, resulting an application crash, eventually leading to a denial of service.
    (CVE-2023-3576)

  - A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a     buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
    (CVE-2023-3618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0057 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-2056:
    Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

    CVE-2022-2057:
    Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

    CVE-2022-2058:
    Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

    CVE-2022-2519:
    There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1

    CVE-2022-2520:
    A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input.

    CVE-2022-2521:
    It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input.

    CVE-2022-2867:
    libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation.

    CVE-2022-2868:
    libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.

    CVE-2022-2953:
    LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8.

    CVE-2022-3627:
    LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from     extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

    CVE-2022-3970:
    A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function     TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is     possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
    The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to     fix this issue. The identifier VDB-213549 was assigned to this vulnerability.

    CVE-2022-48281:
    processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g.,     WRITE of size 307203) via a crafted TIFF image.

    CVE-2023-0795:
    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e.

    CVE-2023-0796:
    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e.

    CVE-2023-0797:
    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by     tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.

    CVE-2023-0798:
    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e.

    CVE-2023-0799:
    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e.

    CVE-2023-0800:
    LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127.

    CVE-2023-0801:
    LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by     tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

    CVE-2023-0802:
    LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127.

    CVE-2023-0803:
    LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127.

    CVE-2023-0804:
    LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127.

    CVE-2023-26965:
    loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image.

    CVE-2023-26966:
    libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian     TIFF file and specifies the output to be big-endian.

    CVE-2023-2731:
    A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file.
    This flaw allows a local attacker to craft specific input data that can cause the program to dereference a     NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.

    CVE-2023-3316:
    A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path     or a path that requires permissions like /dev/null) while specifying zones.

    CVE-2023-3576:
    A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a     TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes     this memory leak issue, resulting an application crash, eventually leading to a denial of service.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6575 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731)

    * libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316)

    * libtiff: memory leak in tiffcrop.c (CVE-2023-3576)

    * libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c     (CVE-2023-26965)

    * libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6575 advisory.

    - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
    - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
    - Fix CVE-2023-2731

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted     TIFF image. (CVE-2023-26965)

  - A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker     to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes     undefined behavior. This will result in an application crash, eventually leading to a denial of service.
    (CVE-2023-2908)

  - A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path     or a path that requires permissions like /dev/null) while specifying zones. (CVE-2023-3316)

  - A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a     TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes     this memory leak issue, resulting an application crash, eventually leading to a denial of service.
    (CVE-2023-3576)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
188758	EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2023-3135)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
188894	EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-2844)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
188907	EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2023-3072)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
206852	NewStart CGSL MAIN 6.02 : libtiff Multiple Vulnerabilities (NS-SA-2024-0051)	Nessus	NewStart CGSL Local Security Checks	2024/9/10	2024/9/10	high
188201	EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2023-2960)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
188444	EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-2986)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
188900	EulerOS Virtualization 3.0.6.0 : libtiff (EulerOS-SA-2023-3435)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
236131	Alibaba Cloud Linux 3 : 0057: libtiff (ALINUX3-SA-2024:0057)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
185133	RHEL 9 : libtiff (RHSA-2023:6575)	Nessus	Red Hat Local Security Checks	2023/11/7	2024/11/7	medium
185831	Oracle Linux 9 : libtiff (ELSA-2023-6575)	Nessus	Oracle Linux Local Security Checks	2023/11/16	2025/9/9	medium
188754	EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2023-2937)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
188775	EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2023-2918)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium

检测

插件搜索

medium

medium

medium

high

medium

medium

medium

high

medium

medium

medium

medium