The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1546 advisory.

  - Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff     4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image. (CVE-2015-8668)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

  - The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF     image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    (CVE-2014-8130)

  - Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial     of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read.
    (CVE-2014-9330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1547 advisory.

  - Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff     4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image. (CVE-2015-8668)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

  - The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF     image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    (CVE-2014-8130)

  - Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial     of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read.
    (CVE-2014-9330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1546 advisory.

    - Add patches for CVEs:
      CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,       CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,       CVE-2015-8784
    - Update patches for CVEs:
      CVE-2014-8127, CVE-2014-8130
    - Update patches:
      CVE-2014-9330, CVE-2014-8127, CVE-2014-8129       CVE-2014-8130
    - Update patch for CVE-2015-8668
    - Remove patches for CVEs:
      CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,       CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,       CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
    - Add patches for CVEs:
      CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,       CVE-2016-3991, CVE-2016-5320
    - Update patches for CVEs:
      CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
    - CVE-2014-8127 should contain only two fixes
    - Revert previous patch CVE-2014-8127
    - Fix patch CVE-2014-8127. Wrongly applied
    - Fix patch CVE-2015-8668. Wrongly applied by me
    - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
    - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
    - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
    - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

LibTIFF was updated fix various security issues that could lead to crashes of the image decoder. (CVE-2014-9655, CVE-2014-8127, CVE-2014-8128, CVE-2014-8129, CVE-2014-8130, CVE-2015-1547)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple flaws have been discovered in libtiff. A     remote attacker could exploit these flaws to cause a     crash or memory corruption and, possibly, execute     arbitrary code by tricking an application linked     against libtiff into processing specially crafted     files.(CVE-2014-9655, CVE-2015-1547, CVE-2015-8784,     CVE-2015-8683, CVE-2015-8665, CVE-2015-8781,     CVE-2015-8782, CVE-2015-8783, CVE-2016-3990,     CVE-2016-5320)

  - Multiple flaws have been discovered in various libtiff     tools (bmp2tiff, pal2rgb, thumbnail, tiff2bw, tiff2pdf,     tiffcrop, tiffdither, tiffsplit, tiff2rgba). By     tricking a user into processing a specially crafted     file, a remote attacker could exploit these flaws to     cause a crash or memory corruption and, possibly,     execute arbitrary code with the privileges of the user     running the libtiff tool.(CVE-2014-8127, CVE-2014-8129,     CVE-2014-8130, CVE-2014-9330, CVE-2015-7554,     CVE-2015-8668, CVE-2016-3632, CVE-2016-3945,     CVE-2016-3991)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92681	CentOS 7 : libtiff (CESA-2016:1546)	Nessus	CentOS Local Security Checks	2016/8/3	2025/9/26	critical
92682	CentOS 6 : libtiff (CESA-2016:1547)	Nessus	CentOS Local Security Checks	2016/8/3	2025/9/26	critical
92689	Oracle Linux 7 : libtiff (ELSA-2016-1546)	Nessus	Oracle Linux Local Security Checks	2016/8/3	2025/8/29	critical
81719	openSUSE Security Update : tiff (openSUSE-2015-207)	Nessus	SuSE Local Security Checks	2015/3/10	2021/1/19	high
99797	EulerOS 2.0 SP1 : libtiff (EulerOS-SA-2016-1034)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical

检测

插件搜索

critical

critical

critical

high

critical