[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256040

 
 

909

 
 

199103

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2023:0095-01 -- Redhat libtiff

ID: oval:org.secpod.oval:def:507449Date: (C)2023-01-30   (M)2023-07-26
Class: PATCHFamily: unix




The libtiff packages contain a library of functions for manipulating Tagged Image File Format files. Security Fix: * LibTiff: DoS from Divide By Zero Error * libtiff: Double free or corruption in rotateImage function at tiffcrop.c * libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c * libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits * libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c * libtiff: Assertion fail in rotateImage function at tiffcrop.c * libtiff: Invalid pointer free operation in TIFFClose at tif_close.c * libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
Red Hat Enterprise Linux 8
Product:
libtiff
Reference:
RHSA-2023:0095-01
CVE-2022-2056
CVE-2022-2057
CVE-2022-2058
CVE-2022-2519
CVE-2022-2520
CVE-2022-2521
CVE-2022-2867
CVE-2022-2868
CVE-2022-2869
CVE-2022-2953
CVE    10
CVE-2022-2521
CVE-2022-2057
CVE-2022-2058
CVE-2022-2520
...

© SecPod Technologies