tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service
    (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a
    TIFFTAG_JPEGTABLES of length one. (CVE-2016-9453)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a
    crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)
    compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in
    tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)
    tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)
    TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to
    cause a denial of service (application crash) via a crafted GIF file. (CVE-2016-3186)

  - The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw"
    option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP
    image. (CVE-2016-3621)

  - The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote
    attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image. (CVE-2016-3622)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of     service (out-of-bounds read) via a crafted TIFF image. (CVE-2016-3625)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201701-16 (libTIFF: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libTIFF. Please review       the CVE identifier and bug reports referenced for details.
  Impact :

    A remote attacker could entice a user to process a specially crafted       image file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
435806	Alpine: tiff: security update to 4.0.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
435806	Alpine: tiff: security update to 4.0.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
255111	Linux Distros Unpatched Vulnerability : CVE-2016-3625	Nessus	Misc.	medium
407363	Alpine: tiff: security update to 4.0.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407363	Alpine: tiff: security update to 4.0.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
96373	GLSA-201701-16 : libTIFF: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2016-3625

medium

Tenable Plugins

high

high

medium

high

high

critical