Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

SUSE: 2018:3327-1 Moderate: TIFF Denial Of Service Issues

suse
Calendar Grey October 23, 2018
Dist Suse Esm H88
SUSE Security Patch for JPEG addressing 4 vulnerability resolutions. Guarantees robustness and safety for business systems.
An update that fixes 5 vulnerabilities is now available

Summary

This update for tiff fixes the following issues: Security issue fixed: - CVE-2018-10779: TIFFWriteScanline in tif_write.c had a heap-based buffer over-read, as demonstrated by bmp2tiff.(bsc#1092480) - CVE-2018-17100: There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file. (bsc#1108637) - CVE-2018-17101: There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file. (bsc#1108627) - CVE-2018-17795: The function t2p_write_pdf in tiff2pdf.c allowed remote attackers to cause a denial of service (heap-based buffer overflow and

Topics%20covered

Topics Covered

security advisory moderate denial of service heap overflow suse image processing tiff

References

#1092480 #1106853 #1108627 #1108637 #1110358

Cross- CVE-2018-10779 CVE-2018-16335 CVE-2018-17100

CVE-2018-17101 CVE-2018-17795

Affected Products:

SUSE Linux Enterprise Module for Desktop Applications 15

SUSE Linux Enterprise Module for Basesystem 15

https://www.suse.com/security/cve/CVE-2018-10779.html

https://www.suse.com/security/cve/CVE-2018-16335.html

https://www.suse.com/security/cve/CVE-2018-17100.html

https://www.suse.com/security/cve/CVE-2018-17101.html

https://www.suse.com/security/cve/CVE-2018-17795.html

https://bugzilla.suse.com/1092480

https://bugzilla.suse.com/1106853

https://bugzilla.suse.com/1108627

https://bugzilla.suse.com/1108637

https://bugzilla.suse.com/1110358

Announcement ID: SUSE-SU-2018:3327-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service heap overflow suse image processing tiff

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.