In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5742-1 advisory.

  - In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an     abort resulting in a remote denial of service attack. (CVE-2017-9937)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the jbigkit package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In LibTIFF 4.0.8, there is a memory malloc failure in     tif_jbig.c. A crafted TIFF document can lead to an     abort resulting in a remote denial of service     attack.(CVE-2017-9937)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the jbigkit package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In LibTIFF 4.0.8, there is a memory malloc failure in     tif_jbig.c. A crafted TIFF document can lead to an     abort resulting in a remote denial of service     attack.(CVE-2017-9937)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the jbigkit package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In LibTIFF 4.0.8, there is a memory malloc failure in     tif_jbig.c. A crafted TIFF document can lead to an     abort resulting in a remote denial of service     attack.(CVE-2017-9937)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libtiff package has been released.

ID	Name	Product	Family	Severity
168193	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : JBIG-KIT vulnerability (USN-5742-1)	Nessus	Ubuntu Local Security Checks	medium
153299	EulerOS 2.0 SP2 : jbigkit (EulerOS-SA-2021-2390)	Nessus	Huawei Local Security Checks	medium
151336	EulerOS Virtualization for ARM 64 3.0.2.0 : jbigkit (EulerOS-SA-2021-2074)	Nessus	Huawei Local Security Checks	medium
147676	EulerOS Virtualization 2.9.0 : jbigkit (EulerOS-SA-2021-1651)	Nessus	Huawei Local Security Checks	medium
147553	EulerOS Virtualization 2.9.1 : jbigkit (EulerOS-SA-2021-1603)	Nessus	Huawei Local Security Checks	medium
147510	EulerOS Virtualization 3.0.6.6 : jbigkit (EulerOS-SA-2021-1486)	Nessus	Huawei Local Security Checks	medium
147113	EulerOS Virtualization for ARM 64 3.0.6.0 : jbigkit (EulerOS-SA-2021-1561)	Nessus	Huawei Local Security Checks	medium
146149	EulerOS 2.0 SP5 : jbigkit (EulerOS-SA-2021-1199)	Nessus	Huawei Local Security Checks	medium
144162	EulerOS 2.0 SP8 : jbigkit (EulerOS-SA-2020-2513)	Nessus	Huawei Local Security Checks	medium
143394	EulerOS 2.0 SP9 : jbigkit (EulerOS-SA-2020-2484)	Nessus	Huawei Local Security Checks	medium
143385	EulerOS 2.0 SP9 : jbigkit (EulerOS-SA-2020-2497)	Nessus	Huawei Local Security Checks	medium
121910	Photon OS 2.0: Libtiff PHSA-2018-2.0-0013	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2017-9937

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high