LibTiff was updated to the 4.0.4 stable release fixing various security issues and bugs.

These security issues were fixed :

  - CVE-2014-8127: Out-of-bounds write (bnc#914890).

  - CVE-2014-8128: Out-of-bounds write (bnc#914890).

  - CVE-2014-8129: Out-of-bounds write (bnc#914890).

  - CVE-2014-8130: Out-of-bounds write (bnc#914890).

  - CVE-2014-9655: Access of uninitialized memory     (bnc#916927).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1546 advisory.

  - Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff     4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image. (CVE-2015-8668)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

  - The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF     image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    (CVE-2014-8130)

  - Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial     of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read.
    (CVE-2014-9330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1547 advisory.

  - Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff     4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image. (CVE-2015-8668)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

  - The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF     image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    (CVE-2014-8130)

  - Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial     of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read.
    (CVE-2014-9330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1546 advisory.

    - Add patches for CVEs:
      CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,       CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,       CVE-2015-8784
    - Update patches for CVEs:
      CVE-2014-8127, CVE-2014-8130
    - Update patches:
      CVE-2014-9330, CVE-2014-8127, CVE-2014-8129       CVE-2014-8130
    - Update patch for CVE-2015-8668
    - Remove patches for CVEs:
      CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,       CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,       CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
    - Add patches for CVEs:
      CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,       CVE-2016-3991, CVE-2016-5320
    - Update patches for CVEs:
      CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
    - CVE-2014-8127 should contain only two fixes
    - Revert previous patch CVE-2014-8127
    - Fix patch CVE-2014-8127. Wrongly applied
    - Fix patch CVE-2015-8668. Wrongly applied by me
    - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
    - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
    - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
    - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1547 advisory.

    - Update patch for CVE-2014-8127
    - Fix patches for CVE-2016-3990 and CVE-2016-5320
    - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
    - CVE-2016-3991 CVE-2016-5320
    - Update patch for CVE-2014-8129
    - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
    - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    - Patch typos in CVE-2014-8127
    - Fix CVE-2014-8127 and CVE-2015-8668 patches

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1547 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a     crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against     libtiff into processing specially crafted files. (CVE-2014-9655, CVE-2015-1547, CVE-2015-8784,     CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2016-3990, CVE-2016-5320)

    * Multiple flaws have been discovered in various libtiff tools (bmp2tiff, pal2rgb, thumbnail, tiff2bw,     tiff2pdf, tiffcrop, tiffdither, tiffsplit, tiff2rgba). By tricking a user into processing a specially     crafted file, a remote attacker could exploit these flaws to cause a crash or memory corruption and,     possibly, execute arbitrary code with the privileges of the user running the libtiff tool. (CVE-2014-8127,     CVE-2014-8129, CVE-2014-8130, CVE-2014-9330, CVE-2015-7554, CVE-2015-8668, CVE-2016-3632, CVE-2016-3945,     CVE-2016-3991)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
85762	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2015:1475-1)	Nessus	SuSE Local Security Checks	2015/9/3	2021/1/6	high
92681	CentOS 7 : libtiff (CESA-2016:1546)	Nessus	CentOS Local Security Checks	2016/8/3	2025/9/26	critical
92682	CentOS 6 : libtiff (CESA-2016:1547)	Nessus	CentOS Local Security Checks	2016/8/3	2025/9/26	critical
92689	Oracle Linux 7 : libtiff (ELSA-2016-1546)	Nessus	Oracle Linux Local Security Checks	2016/8/3	2025/8/29	critical
92690	Oracle Linux 6 : libtiff (ELSA-2016-1547)	Nessus	Oracle Linux Local Security Checks	2016/8/3	2025/8/29	critical
92697	RHEL 6 : libtiff (RHSA-2016:1547)	Nessus	Red Hat Local Security Checks	2016/8/3	2025/8/29	critical

检测

插件搜索

high

critical

critical

critical

critical

critical