DeutschShown in its original language — a full translation is planned for a future version.
libTIFF: Mehrere Schwachstellen
view advisory published 2016-06-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand hervorzurufen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-5320US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should ref… | ||||
| CVE-2016-5314US | high8.8 | — | ||
Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly h… | ||||
| CVE-2016-5322US | medium5.5 | — | ||
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. | ||||
| CVE-2016-5315US | medium5.5 | — | ||
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. | ||||
| CVE-2016-5323US | high7.5 | — | ||
The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image. | ||||
| CVE-2016-5321US | medium6.5 | — | ||
The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image. | ||||
| CVE-2016-5317US | medium6.5 | — | ||
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a den… | ||||
| CVE-2016-5316US | medium6.5 | — | ||
Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image t… | ||||
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisory JSA11023 vom 2020-07-08external
- OSS Security Mailing List vom 2016-06-14external
- OSS Security Mailing List vom 2016-06-14external
- OSS Security Mailing List vom 2016-06-14external
- OSS Security Mailing List vom 2016-06-14external
- OSS Security Mailing List vom 2016-06-14external
- OSS Security Mailing List vom 2016-06-14external
- OSS Security Mailing List vom 2016-06-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan