A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used."

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986110 advisory.

    A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the     function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null     pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is     rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and     may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply     a patch to fix this issue. One of the maintainers explains, that [t]his error only occurs if     DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. rD) option is used.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03346-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03345-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03348-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2024-13978: null pointer dereference in component fax2ps (bsc#1247581)
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5869edf3de advisory.

    - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


    ----

    - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c612cbc58f advisory.

    Automatic update for libtiff-4.7.0-8.fc44.

    ##### **Changelog**

    ```
    * Mon Aug 25 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-8
    - fix  CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
    * Tue Aug 12 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
    - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
    - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ebff4d54bf advisory.

    Automatic update for libtiff-4.7.0-8.fc43.

    ##### **Changelog**

    ```
    * Mon Aug 25 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-8
    - fix  CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
    * Tue Aug 12 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
    - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
    - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7707-1 advisory.

    It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffmedian tool.
    An attacker could trick a user into processing a specially crafted tiff image file and potentially use     this issue to cause a denial of service. (CVE-2025-8176)

    It was discovered that LibTIFF did not properly perform bounds checking in certain operations when using     thumbnail tool. An attacker could trick a user into processing a specially crafted tiff image file and     potentially use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and     Ubuntu 16.04 LTS. (CVE-2025-8177)

    It was discovered that LibTIFF incorrectly handled certain memory

    operations when using tiff2ps tool. An attacker could trick a user into processing a specially crafted     tiff image file and potentially use this issue to cause a denial of service. (CVE-2025-8534)

    It was discovered that LibTIFF did not properly perform bounds checking

    in certain operations when using tiffcrop tool. An attacker could trick

    a user into processing a specially crafted tiff image file and

    potentially use this issue to cause a denial of service. (CVE-2025-8851)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the     function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null     pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is     rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and     may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply     a patch to fix this issue. One of the maintainers explains, that [t]his error only occurs if     DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. rD) option is used. (CVE-2025-8534)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a78662be2c advisory.

    - fixes CVE-2025-8534: null pointer dereference in tiff2p
    - fixes CVE-2024-13978: null pointer dereference in tiff2pdf


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
268526	Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-986110)	Nessus	Unity Linux Local Security Checks	low
265840	SUSE SLES12 Security Update : tiff (SUSE-SU-2025:03346-1)	Nessus	SuSE Local Security Checks	medium
265837	SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2025:03345-1)	Nessus	SuSE Local Security Checks	medium
265834	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tiff (SUSE-SU-2025:03348-1)	Nessus	SuSE Local Security Checks	medium
258026	Fedora 41 : libtiff (2025-5869edf3de)	Nessus	Fedora Local Security Checks	low
254437	Fedora 44 : libtiff (2025-c612cbc58f)	Nessus	Fedora Local Security Checks	low
254436	Fedora 43 : libtiff (2025-ebff4d54bf)	Nessus	Fedora Local Security Checks	low
253529	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : LibTIFF vulnerabilities (USN-7707-1)	Nessus	Ubuntu Local Security Checks	medium
253419	Linux Distros Unpatched Vulnerability : CVE-2025-8534	Nessus	Misc.	low
249974	Fedora 42 : libtiff (2025-a78662be2c)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2025-8534

low

Tenable Plugins

low

medium

medium

medium

low

low

low

medium

low

low