OracleVM 3.3 / 3.4 : libtiff (OVMSA-2016-0093)

This script is Copyright (C) 2016-2017 Tenable Network Security, Inc.


Synopsis :

The remote OracleVM host is missing a security update.

Description :

The remote OracleVM system is missing necessary patches to address
critical security updates :

- Update patch for (CVE-2014-8127)

- Related: #1335099

- Fix patches for (CVE-2016-3990, CVE-2016-5320)

- Related: #1335099

- Add patches for CVEs :

- CVE-2016-3632 CVE-2016-3945 (CVE-2016-3990)

- CVE-2016-3991 (CVE-2016-5320)

- Related: #1335099

- Update patch for (CVE-2014-8129)

- Related: #1335099

- Merge previously released fixes for CVEs :

- CVE-2013-1960 CVE-2013-1961 (CVE-2013-4231)

- CVE-2013-4232 CVE-2013-4243 (CVE-2013-4244)

- Resolves: #1335099

- Patch typos in (CVE-2014-8127)

- Related: #1299919

- Fix CVE-2014-8127 and CVE-2015-8668 patches

- Related: #1299919

- Fixed patches on preview CVEs

- Related: #1299919

- This resolves several CVEs

- CVE-2014-8127, CVE-2014-8129, (CVE-2014-8130)

- CVE-2014-9330, CVE-2014-9655, (CVE-2015-8781)

- CVE-2015-8784, CVE-2015-1547, (CVE-2015-8683)

- CVE-2015-8665, CVE-2015-7554, (CVE-2015-8668)

- Resolves: #1299919

See also :

http://www.nessus.org/u?68c2f69e
http://www.nessus.org/u?413e6c1c

Solution :

Update the affected libtiff package.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 8.4
(CVSS2#E:POC/RL:U/RC:ND)
Public Exploit Available : true