Security update for tiff SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1835-1 Final 1 1 2018-06-28T09:41:44Z current 2018-06-28T09:41:44Z 2018-06-28T09:41:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tiff This update for tiff fixes the following security issues: - CVE-2017-5225: Prevent heap buffer overflow in the tools/tiffcp that could have caused DoS or code execution via a crafted BitsPerSample value (bsc#1019611) - CVE-2018-7456: Prevent a NULL Pointer dereference in the function TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013 (bsc#1082825) - CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If the value of td_imagelength is set close to the amount of system memory, it will hang the system or trigger the OOM killer (bsc#1082332) - CVE-2016-10266: Prevent remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22 (bsc#1031263) - CVE-2018-8905: Prevent heap-based buffer overflow in the function LZWDecodeCompat via a crafted TIFF file (bsc#1086408) - CVE-2016-9540: Prevent out-of-bounds write on tiled images with odd tile width versus image width (bsc#1011839). - CVE-2016-9535: tif_predict.h and tif_predict.c had assertions that could have lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling (bsc#1011846). - CVE-2016-9535: tif_predict.h and tif_predict.c had assertions that could have lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling (bsc#1011846). - Removed assert in readSeparateTilesIntoBuffer() function (bsc#1017689). - CVE-2016-10095: Prevent stack-based buffer overflow in the _TIFFVGetField function that allowed remote attackers to cause a denial of service (crash) via a crafted TIFF file (bsc#1017690). - CVE-2016-8331: Prevent remote code execution because of incorrect handling of TIFF images. A crafted TIFF document could have lead to a type confusion vulnerability resulting in remote code execution. This vulnerability could have been be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality (bsc#1007276). - CVE-2016-3632: The _TIFFVGetField function allowed remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image (bsc#974621). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-tiff-13683,slessp4-tiff-13683 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ Link for SUSE-SU-2018:1835-1 https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html E-Mail link for SUSE-SU-2018:1835-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1007276 SUSE Bug 1007276 https://bugzilla.suse.com/1011839 SUSE Bug 1011839 https://bugzilla.suse.com/1011846 SUSE Bug 1011846 https://bugzilla.suse.com/1017689 SUSE Bug 1017689 https://bugzilla.suse.com/1017690 SUSE Bug 1017690 https://bugzilla.suse.com/1019611 SUSE Bug 1019611 https://bugzilla.suse.com/1031263 SUSE Bug 1031263 https://bugzilla.suse.com/1082332 SUSE Bug 1082332 https://bugzilla.suse.com/1082825 SUSE Bug 1082825 https://bugzilla.suse.com/1086408 SUSE Bug 1086408 https://bugzilla.suse.com/974621 SUSE Bug 974621 https://www.suse.com/security/cve/CVE-2014-8128/ SUSE CVE CVE-2014-8128 page https://www.suse.com/security/cve/CVE-2015-7554/ SUSE CVE CVE-2015-7554 page https://www.suse.com/security/cve/CVE-2016-10095/ SUSE CVE CVE-2016-10095 page https://www.suse.com/security/cve/CVE-2016-10266/ SUSE CVE CVE-2016-10266 page https://www.suse.com/security/cve/CVE-2016-3632/ SUSE CVE CVE-2016-3632 page https://www.suse.com/security/cve/CVE-2016-5318/ SUSE CVE CVE-2016-5318 page https://www.suse.com/security/cve/CVE-2016-8331/ SUSE CVE CVE-2016-8331 page https://www.suse.com/security/cve/CVE-2016-9535/ SUSE CVE CVE-2016-9535 page https://www.suse.com/security/cve/CVE-2016-9540/ SUSE CVE CVE-2016-9540 page https://www.suse.com/security/cve/CVE-2017-11613/ SUSE CVE CVE-2017-11613 page https://www.suse.com/security/cve/CVE-2017-5225/ SUSE CVE CVE-2017-5225 page https://www.suse.com/security/cve/CVE-2018-7456/ SUSE CVE CVE-2018-7456 page https://www.suse.com/security/cve/CVE-2018-8905/ SUSE CVE CVE-2018-8905 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libtiff-devel-3.8.2-141.169.9.1 libtiff-devel-32bit-3.8.2-141.169.9.1 libtiff3-3.8.2-141.169.9.1 libtiff3-32bit-3.8.2-141.169.9.1 libtiff3-x86-3.8.2-141.169.9.1 tiff-3.8.2-141.169.9.1 libtiff3-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server 11 SP4 libtiff3-32bit-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server 11 SP4 libtiff3-x86-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server 11 SP4 tiff-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server 11 SP4 libtiff3-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtiff3-32bit-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtiff3-x86-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tiff-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtiff-devel-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtiff-devel-32bit-3.8.2-141.169.9.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image. CVE-2014-8128 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2014-8128.html CVE-2014-8128 https://bugzilla.suse.com/1007276 SUSE Bug 1007276 https://bugzilla.suse.com/1017690 SUSE Bug 1017690 https://bugzilla.suse.com/1040322 SUSE Bug 1040322 https://bugzilla.suse.com/1206220 SUSE Bug 1206220 https://bugzilla.suse.com/914890 SUSE Bug 914890 https://bugzilla.suse.com/916925 SUSE Bug 916925 https://bugzilla.suse.com/942690 SUSE Bug 942690 https://bugzilla.suse.com/960341 SUSE Bug 960341 https://bugzilla.suse.com/969783 SUSE Bug 969783 https://bugzilla.suse.com/974621 SUSE Bug 974621 https://bugzilla.suse.com/983436 SUSE Bug 983436 The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. CVE-2015-7554 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2015-7554.html CVE-2015-7554 https://bugzilla.suse.com/1007276 SUSE Bug 1007276 https://bugzilla.suse.com/1017690 SUSE Bug 1017690 https://bugzilla.suse.com/1040322 SUSE Bug 1040322 https://bugzilla.suse.com/960341 SUSE Bug 960341 https://bugzilla.suse.com/974621 SUSE Bug 974621 https://bugzilla.suse.com/983436 SUSE Bug 983436 Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file. CVE-2016-10095 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-10095.html CVE-2016-10095 https://bugzilla.suse.com/1017690 SUSE Bug 1017690 https://bugzilla.suse.com/960341 SUSE Bug 960341 https://bugzilla.suse.com/983436 SUSE Bug 983436 LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22. CVE-2016-10266 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-10266.html CVE-2016-10266 https://bugzilla.suse.com/1017694 SUSE Bug 1017694 https://bugzilla.suse.com/1031263 SUSE Bug 1031263 The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image. CVE-2016-3632 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 low 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-3632.html CVE-2016-3632 https://bugzilla.suse.com/1007276 SUSE Bug 1007276 https://bugzilla.suse.com/974621 SUSE Bug 974621 https://bugzilla.suse.com/983436 SUSE Bug 983436 Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. CVE-2016-5318 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-5318.html CVE-2016-5318 https://bugzilla.suse.com/1007276 SUSE Bug 1007276 https://bugzilla.suse.com/1017690 SUSE Bug 1017690 https://bugzilla.suse.com/1040322 SUSE Bug 1040322 https://bugzilla.suse.com/960341 SUSE Bug 960341 https://bugzilla.suse.com/974621 SUSE Bug 974621 https://bugzilla.suse.com/983436 SUSE Bug 983436 An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality. CVE-2016-8331 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-8331.html CVE-2016-8331 https://bugzilla.suse.com/1007276 SUSE Bug 1007276 tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow." CVE-2016-9535 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-9535.html CVE-2016-9535 https://bugzilla.suse.com/1011846 SUSE Bug 1011846 https://bugzilla.suse.com/1013308 SUSE Bug 1013308 tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow." CVE-2016-9540 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2016-9540.html CVE-2016-9540 https://bugzilla.suse.com/1011839 SUSE Bug 1011839 https://bugzilla.suse.com/1013308 SUSE Bug 1013308 In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer. CVE-2017-11613 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2017-11613.html CVE-2017-11613 https://bugzilla.suse.com/1082332 SUSE Bug 1082332 https://bugzilla.suse.com/1106853 SUSE Bug 1106853 LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. CVE-2017-5225 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2017-5225.html CVE-2017-5225 https://bugzilla.suse.com/1019611 SUSE Bug 1019611 A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.) CVE-2018-7456 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2018-7456.html CVE-2018-7456 https://bugzilla.suse.com/1074317 SUSE Bug 1074317 https://bugzilla.suse.com/1082825 SUSE Bug 1082825 In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps. CVE-2018-8905 SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/ https://www.suse.com/security/cve/CVE-2018-8905.html CVE-2018-8905 https://bugzilla.suse.com/1086408 SUSE Bug 1086408