tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libtiff: Heap-based buffer over-read in bmp2tiff (CVE-2017-9117)

  - LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows     remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.
    (CVE-2014-8128)

  - Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7,     3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2,     4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted     image. (CVE-2016-10092)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libtiff: Heap-based buffer over-read in bmp2tiff (CVE-2017-9117)

  - LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows     remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.
    (CVE-2014-8128)

  - Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of     service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via     crafted width and length values in RLE4 or RLE8 data in a BMP file. (CVE-2015-8870)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libtiff: Heap-based buffer over-read in bmp2tiff (CVE-2017-9117)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows     remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.
    (CVE-2014-8128)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote     attackers to cause a denial of service (heap-based     buffer over-read and buffer overflow) or possibly have     unspecified other impact via a crafted TIFF image,     related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13.(CVE-2016-10271)

  - In LibTIFF 4.0.7, a memory leak vulnerability was found     in the function OJPEGReadHeaderInfoSecTablesQTable in     tif_ojpeg.c, which allows attackers to cause a denial     of service via a crafted file.(CVE-2017-9404)

  - LibTIFF 4.0.8 has multiple memory leak vulnerabilities,     which allow attackers to cause a denial of service     (memory consumption), as demonstrated by tif_open.c,     tif_lzw.c, and tif_aux.c. NOTE: Third parties were     unable to reproduce the issue.(CVE-2017-16232)

  - There is a heap based buffer overflow in     tools/tiff2pdf.c of LibTIFF 4.0.8 via a     PlanarConfig=Contig image, which causes a more than one     hundred bytes out-of-bounds write (related to the     ZIPDecode function in tif_zip.c). A crafted input may     lead to a remote denial of service attack or an     arbitrary code execution attack.(CVE-2017-11335)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There is a heap based buffer overflow in     tools/tiff2pdf.c of LibTIFF 4.0.8 via a     PlanarConfig=Contig image, which causes a more than one     hundred bytes out-of-bounds write (related to the     ZIPDecode function in tif_zip.c). A crafted input may     lead to a remote denial of service attack or an     arbitrary code execution attack.(CVE-2017-11335)

  - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote     attackers to cause a denial of service (heap-based     buffer over-read and buffer overflow) or possibly have     unspecified other impact via a crafted TIFF image,     related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13.(CVE-2016-10271)

  - In LibTIFF 4.0.7, a memory leak vulnerability was found     in the function OJPEGReadHeaderInfoSecTablesQTable in     tif_ojpeg.c, which allows attackers to cause a denial     of service via a crafted file.(CVE-2017-9404)

  - LibTIFF 4.0.8 has multiple memory leak vulnerabilities,     which allow attackers to cause a denial of service     (memory consumption), as demonstrated by tif_open.c,     tif_lzw.c, and tif_aux.c. NOTE: Third parties were     unable to reproduce the issue.(CVE-2017-16232)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote     attackers to cause a denial of service (heap-based     buffer over-read and buffer overflow) or possibly have     unspecified other impact via a crafted TIFF image,     related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13.(CVE-2016-10271)

  - There is a heap based buffer overflow in     tools/tiff2pdf.c of LibTIFF 4.0.8 via a     PlanarConfig=Contig image, which causes a more than one     hundred bytes out-of-bounds write (related to the     ZIPDecode function in tif_zip.c). A crafted input may     lead to a remote denial of service attack or an     arbitrary code execution attack.(CVE-2017-11335)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for :

  - **CVE-2016-10266**

  - **CVE-2016-10267**

  - **CVE-2016-10268**

  - **CVE-2016-10269**

  - **CVE-2016-10270**

  - **CVE-2016-10271**

  - **CVE-2016-10272**

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tiff fixes the following issues :

Security issues fixed :

  - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer overflow)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'WRITE of size 2048' and     libtiff/tif_next.c:64:9 (bsc#1031247).

  - CVE-2016-10271: tools/tiffcrop.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service     (heap-based buffer over-read and buffer overflow) or     possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13 (bsc#1031249).

  - CVE-2016-10270: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 8' and     libtiff/tif_read.c:523:22 (bsc#1031250).

  - CVE-2016-10269: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 512' and     libtiff/tif_unix.c:340:2 (bsc#1031254).

  - CVE-2016-10268: tools/tiffcp.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service (integer     underflow and heap-based buffer under-read) or possibly     have unspecified other impact via a crafted TIFF image,     related to 'READ of size 78490' and     libtiff/tif_unix.c:115:23 (bsc#1031255).

  - CVE-2016-10267: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_ojpeg.c:816:8 (bsc#1031262).

  - CVE-2016-10266: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_read.c:351:22. (bsc#1031263).

This update was imported from the SUSE:SLE-12:Update update project.

This update for tiff fixes the following issues: Security issues fixed :

  - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer overflow)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'WRITE of size 2048' and     libtiff/tif_next.c:64:9 (bsc#1031247).

  - CVE-2016-10271: tools/tiffcrop.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service     (heap-based buffer over-read and buffer overflow) or     possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13 (bsc#1031249).

  - CVE-2016-10270: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 8' and     libtiff/tif_read.c:523:22 (bsc#1031250).

  - CVE-2016-10269: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 512' and     libtiff/tif_unix.c:340:2 (bsc#1031254).

  - CVE-2016-10268: tools/tiffcp.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service (integer     underflow and heap-based buffer under-read) or possibly     have unspecified other impact via a crafted TIFF image,     related to 'READ of size 78490' and     libtiff/tif_unix.c:115:23 (bsc#1031255).

  - CVE-2016-10267: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_ojpeg.c:816:8 (bsc#1031262).

  - CVE-2016-10266: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_read.c:351:22. (bsc#1031263).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198513	RHEL 6 : libtiff (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198475	RHEL 7 : libtiff (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198470	RHEL 5 : libtiff (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196612	RHEL 5 : libtiff (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196585	RHEL 6 : libtiff (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196532	RHEL 7 : libtiff (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
146680	EulerOS 2.0 SP2 : compat-libtiff3 (EulerOS-SA-2021-1285)	Nessus	Huawei Local Security Checks	high
146160	EulerOS 2.0 SP5 : compat-libtiff3 (EulerOS-SA-2021-1184)	Nessus	Huawei Local Security Checks	high
145116	EulerOS 2.0 SP3 : compat-libtiff3 (EulerOS-SA-2021-1062)	Nessus	Huawei Local Security Checks	high
101563	Fedora 26 : libtiff (2017-05b9048fbc)	Nessus	Fedora Local Security Checks	high
99704	openSUSE Security Update : tiff (openSUSE-2017-515)	Nessus	SuSE Local Security Checks	high
99466	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2017:1044-1)	Nessus	SuSE Local Security Checks	high
99273	Fedora 25 : libtiff (2017-ab3acddd21)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2016-10271

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

high

high

high

high

high

high

high