tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote     attackers to cause a denial of service (heap-based     buffer over-read and buffer overflow) or possibly have     unspecified other impact via a crafted TIFF image,     related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13.(CVE-2016-10271)

  - In LibTIFF 4.0.7, a memory leak vulnerability was found     in the function OJPEGReadHeaderInfoSecTablesQTable in     tif_ojpeg.c, which allows attackers to cause a denial     of service via a crafted file.(CVE-2017-9404)

  - LibTIFF 4.0.8 has multiple memory leak vulnerabilities,     which allow attackers to cause a denial of service     (memory consumption), as demonstrated by tif_open.c,     tif_lzw.c, and tif_aux.c. NOTE: Third parties were     unable to reproduce the issue.(CVE-2017-16232)

  - There is a heap based buffer overflow in     tools/tiff2pdf.c of LibTIFF 4.0.8 via a     PlanarConfig=Contig image, which causes a more than one     hundred bytes out-of-bounds write (related to the     ZIPDecode function in tif_zip.c). A crafted input may     lead to a remote denial of service attack or an     arbitrary code execution attack.(CVE-2017-11335)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There is a heap based buffer overflow in     tools/tiff2pdf.c of LibTIFF 4.0.8 via a     PlanarConfig=Contig image, which causes a more than one     hundred bytes out-of-bounds write (related to the     ZIPDecode function in tif_zip.c). A crafted input may     lead to a remote denial of service attack or an     arbitrary code execution attack.(CVE-2017-11335)

  - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote     attackers to cause a denial of service (heap-based     buffer over-read and buffer overflow) or possibly have     unspecified other impact via a crafted TIFF image,     related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13.(CVE-2016-10271)

  - In LibTIFF 4.0.7, a memory leak vulnerability was found     in the function OJPEGReadHeaderInfoSecTablesQTable in     tif_ojpeg.c, which allows attackers to cause a denial     of service via a crafted file.(CVE-2017-9404)

  - LibTIFF 4.0.8 has multiple memory leak vulnerabilities,     which allow attackers to cause a denial of service     (memory consumption), as demonstrated by tif_open.c,     tif_lzw.c, and tif_aux.c. NOTE: Third parties were     unable to reproduce the issue.(CVE-2017-16232)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote     attackers to cause a denial of service (heap-based     buffer over-read and buffer overflow) or possibly have     unspecified other impact via a crafted TIFF image,     related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13.(CVE-2016-10271)

  - There is a heap based buffer overflow in     tools/tiff2pdf.c of LibTIFF 4.0.8 via a     PlanarConfig=Contig image, which causes a more than one     hundred bytes out-of-bounds write (related to the     ZIPDecode function in tif_zip.c). A crafted input may     lead to a remote denial of service attack or an     arbitrary code execution attack.(CVE-2017-11335)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for :

  - **CVE-2016-10266**

  - **CVE-2016-10267**

  - **CVE-2016-10268**

  - **CVE-2016-10269**

  - **CVE-2016-10270**

  - **CVE-2016-10271**

  - **CVE-2016-10272**

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tiff fixes the following issues :

Security issues fixed :

  - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer overflow)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'WRITE of size 2048' and     libtiff/tif_next.c:64:9 (bsc#1031247).

  - CVE-2016-10271: tools/tiffcrop.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service     (heap-based buffer over-read and buffer overflow) or     possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13 (bsc#1031249).

  - CVE-2016-10270: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 8' and     libtiff/tif_read.c:523:22 (bsc#1031250).

  - CVE-2016-10269: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 512' and     libtiff/tif_unix.c:340:2 (bsc#1031254).

  - CVE-2016-10268: tools/tiffcp.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service (integer     underflow and heap-based buffer under-read) or possibly     have unspecified other impact via a crafted TIFF image,     related to 'READ of size 78490' and     libtiff/tif_unix.c:115:23 (bsc#1031255).

  - CVE-2016-10267: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_ojpeg.c:816:8 (bsc#1031262).

  - CVE-2016-10266: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_read.c:351:22. (bsc#1031263).

This update was imported from the SUSE:SLE-12:Update update project.

This update for tiff fixes the following issues: Security issues fixed :

  - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer overflow)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'WRITE of size 2048' and     libtiff/tif_next.c:64:9 (bsc#1031247).

  - CVE-2016-10271: tools/tiffcrop.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service     (heap-based buffer over-read and buffer overflow) or     possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 1' and     libtiff/tif_fax3.c:413:13 (bsc#1031249).

  - CVE-2016-10270: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 8' and     libtiff/tif_read.c:523:22 (bsc#1031250).

  - CVE-2016-10269: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     or possibly have unspecified other impact via a crafted     TIFF image, related to 'READ of size 512' and     libtiff/tif_unix.c:340:2 (bsc#1031254).

  - CVE-2016-10268: tools/tiffcp.c in LibTIFF 4.0.7 allows     remote attackers to cause a denial of service (integer     underflow and heap-based buffer under-read) or possibly     have unspecified other impact via a crafted TIFF image,     related to 'READ of size 78490' and     libtiff/tif_unix.c:115:23 (bsc#1031255).

  - CVE-2016-10267: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_ojpeg.c:816:8 (bsc#1031262).

  - CVE-2016-10266: LibTIFF 4.0.7 allows remote attackers to     cause a denial of service (divide-by-zero error and     application crash) via a crafted TIFF image, related to     libtiff/tif_read.c:351:22. (bsc#1031263).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
146680	EulerOS 2.0 SP2 : compat-libtiff3 (EulerOS-SA-2021-1285)	Nessus	Huawei Local Security Checks	high
146160	EulerOS 2.0 SP5 : compat-libtiff3 (EulerOS-SA-2021-1184)	Nessus	Huawei Local Security Checks	high
145116	EulerOS 2.0 SP3 : compat-libtiff3 (EulerOS-SA-2021-1062)	Nessus	Huawei Local Security Checks	high
101563	Fedora 26 : libtiff (2017-05b9048fbc)	Nessus	Fedora Local Security Checks	high
99704	openSUSE Security Update : tiff (openSUSE-2017-515)	Nessus	SuSE Local Security Checks	high
99466	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2017:1044-1)	Nessus	SuSE Local Security Checks	high
99273	Fedora 25 : libtiff (2017-ab3acddd21)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2016-10271

high

Tenable Plugins

high

high

high

high

high

high

high