In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.
    (CVE-2017-17942)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for tiff fixes the following issues :

Security issues fixed :

CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).

CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).

CVE-2017-9147: Fixed invalid read in the _TIFFVGetField function in tif_dir.c, that allowed remote attackers to cause a DoS via acrafted TIFF file (bsc#1040322).

CVE-2017-9117: Fixed BMP images processing that was verified without biWidth and biHeight values (bsc#1040080).

CVE-2017-17942: Fixed issue in the function PackBitsEncode that could have led to a heap overflow and caused a DoS (bsc#1074186).

CVE-2016-9273: Fixed heap-based buffer overflow issue (bsc#1010163).

CVE-2016-5319: Fixed heap-based buffer overflow in PackBitsEncode (bsc#983440).

CVE-2016-3621: Fixed out-of-bounds read in the bmp2tiff tool (lzw packing) (bsc#974448).

CVE-2016-3620: Fixed out-of-bounds read in the bmp2tiff tool (zip packing) (bsc#974447)

CVE-2016-3619: Fixed out-of-bounds read in the bmp2tiff tool (none packing) (bsc#974446)

CVE-2015-8870: Fixed integer overflow in tools/bmp2tiff.c that allowed remote attackers to causea DOS (bsc#1014461).

Non-security issues fixed: asan_build: build ASAN included

debug_build: build more suitable for debugging

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tiff fixes the following issues :

Security issues fixed :

  - CVE-2018-10779: Fixed a heap-based buffer overflow in     TIFFWriteScanline() in tif_write.c (bsc#1092480)

  - CVE-2017-17942: Fixed a heap-based buffer overflow in     the function PackBitsEncode in tif_packbits.c.
    (bsc#1074186)

  - CVE-2016-5319: Fixed a beap-based buffer overflow in     bmp2tiff (bsc#983440)

This update was imported from the SUSE:SLE-12:Update update project.

This update for tiff fixes the following issues :

Security issues fixed :

CVE-2018-10779: Fixed a heap-based buffer overflow in TIFFWriteScanline() in tif_write.c (bsc#1092480)

CVE-2017-17942: Fixed a heap-based buffer overflow in the function PackBitsEncode in tif_packbits.c. (bsc#1074186)

CVE-2016-5319: Fixed a beap-based buffer overflow in bmp2tiff (bsc#983440)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tiff fixes the following issues :

The following security vulnerabilities were addressed :

CVE-2015-8668: Fixed a heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff, which allowed remote attackers to execute arbitrary code or cause a denial of service via a large width field in a specially crafted BMP image.
(bsc#960589)

CVE-2018-10779: Fixed a heap-based buffer over-read in TIFFWriteScanline() in tif_write.c (bsc#1092480)

CVE-2017-17942: Fixed a heap-based buffer overflow in the function PackBitsEncode in tif_packbits.c. (bsc#1074186)

CVE-2016-5319: Fixed a beap-based buffer overflow in bmp2tiff (bsc#983440)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
220990	Linux Distros Unpatched Vulnerability : CVE-2017-17942	Nessus	Misc.	Local	high
119143	SUSE SLES11 Security Update : tiff (SUSE-SU-2018:3879-1)	Nessus	SuSE Local Security Checks	Local	critical
117798	openSUSE Security Update : tiff (openSUSE-2018-1056)	Nessus	SuSE Local Security Checks	Local	high
117698	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:2836-1)	Nessus	SuSE Local Security Checks	Local	high
117448	SUSE SLES11 Security Update : tiff (SUSE-SU-2018:2676-1)	Nessus	SuSE Local Security Checks	Local	critical

Detections

Analytics

CVE-2017-17942

high

Tenable Plugins

high

critical

high

high

critical