LibTiff was updated to the 4.0.4 stable release fixing various security issues and bugs.

These security issues were fixed :

  - CVE-2014-8127: Out-of-bounds write (bnc#914890).

  - CVE-2014-8128: Out-of-bounds write (bnc#914890).

  - CVE-2014-8129: Out-of-bounds write (bnc#914890).

  - CVE-2014-8130: Out-of-bounds write (bnc#914890).

  - CVE-2014-9655: Access of uninitialized memory     (bnc#916927).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-585:01 advisory.

    The libtiff package contains a library of functions for manipulating     TIFF (Tagged Image File Format) image format files.  TIFF is a widely     used file format for bitmapped images.  TIFF files usually end in the     .tif extension and they are often quite large.
    The libtiff package should be installed if you need to manipulate TIFF     format image files.
    Security issues fixed with this release:
    CVE-2014-8127
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-8129
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-8130
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-9330     Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows     remote attackers to cause a denial of service (crash) via crafted BMP     image, related to dimensions, which triggers an out-of-bounds read.
    CVE-2014-9655     The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2)     NeXTDecode function in tif_next.c in LibTIFF allows remote attackers     to cause a denial of service (uninitialized memory access) via a     crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and     libtiff-cvs-2.tif.
    CVE-2015-1547     The NeXTDecode function in tif_next.c in LibTIFF allows remote     attackers to cause a denial of service (uninitialized memory access)     via a crafted TIFF image, as demonstrated by libtiff5.tif.
    CVE-2015-7554     The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows     attackers to cause a denial of service (invalid memory write and     crash) or possibly have unspecified other impact via crafted field     data in an extension tag in a TIFF image.
    CVE-2015-8665     tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a     denial of service (out-of-bounds read) via the SamplesPerPixel tag in     a TIFF image.
    CVE-2015-8668     Heap-based buffer overflow in the PackBitsPreEncode function in     tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote     attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image.
    CVE-2015-8683     The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6     allows remote attackers to cause a denial of service (out-of-bounds     read) via a packed TIFF image.
    CVE-2015-8781     tif_luv.c in libtiff allows attackers to cause a denial of service     (out-of-bounds write) via an invalid number of samples per pixel in a     LogL compressed TIFF image, a different vulnerability than     CVE-2015-8782.
    CVE-2015-8782     tif_luv.c in libtiff allows attackers to cause a denial of service     (out-of-bounds writes) via a crafted TIFF image, a different     vulnerability than CVE-2015-8781.
    CVE-2015-8783     tif_luv.c in libtiff allows attackers to cause a denial of service     (out-of-bounds reads) via a crafted TIFF image.
    CVE-2015-8784     The NeXTDecode function in tif_next.c in LibTIFF allows remote     attackers to cause a denial of service (out-of-bounds write) via a     crafted TIFF image, as demonstrated by libtiff5.tif.
    CVE-2016-3632
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-3945
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-3990
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-3991
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-5320
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1546 advisory.

  - Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff     4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image. (CVE-2015-8668)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

  - The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF     image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    (CVE-2014-8130)

  - Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial     of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read.
    (CVE-2014-9330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1547 advisory.

  - Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff     4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a     large width field in a BMP image. (CVE-2015-8668)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a     crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2)     compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in     tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5)     tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7)     TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. (CVE-2014-8127)

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

  - The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF     image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    (CVE-2014-8130)

  - Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial     of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read.
    (CVE-2014-9330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1546 advisory.

    - Add patches for CVEs:
      CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,       CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,       CVE-2015-8784
    - Update patches for CVEs:
      CVE-2014-8127, CVE-2014-8130
    - Update patches:
      CVE-2014-9330, CVE-2014-8127, CVE-2014-8129       CVE-2014-8130
    - Update patch for CVE-2015-8668
    - Remove patches for CVEs:
      CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,       CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,       CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
    - Add patches for CVEs:
      CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,       CVE-2016-3991, CVE-2016-5320
    - Update patches for CVEs:
      CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
    - CVE-2014-8127 should contain only two fixes
    - Revert previous patch CVE-2014-8127
    - Fix patch CVE-2014-8127. Wrongly applied
    - Fix patch CVE-2015-8668. Wrongly applied by me
    - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
    - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
    - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
    - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that     the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    (CVE-2014-8129)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
85762	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2015:1475-1)	Nessus	SuSE Local Security Checks	9/3/2015	1/6/2021	high
289603	MiracleLinux 4 : libtiff-3.9.4-18.AXS4 (AXSA:2016-585:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical
92681	CentOS 7 : libtiff (CESA-2016:1546)	Nessus	CentOS Local Security Checks	8/3/2016	9/26/2025	critical
92682	CentOS 6 : libtiff (CESA-2016:1547)	Nessus	CentOS Local Security Checks	8/3/2016	9/26/2025	critical
92689	Oracle Linux 7 : libtiff (ELSA-2016-1546)	Nessus	Oracle Linux Local Security Checks	8/3/2016	8/29/2025	critical
218578	Linux Distros Unpatched Vulnerability : CVE-2014-8129	Nessus	Misc.	3/4/2025	7/20/2026	high

Detections

Analytics

Plugins Search

high

critical

critical

critical

critical

high