Vulnerability CVE-2014-8129: Information
Description
LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
Severity: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| libtiff | sisyphus | 4.0.10.0.57.f9fc01c3-alt1 | 4.4.0-alt4 | ALT-PU-2019-1628-1 | 226958 | Fixed |
| libtiff | p10 | 4.0.10.0.57.f9fc01c3-alt1 | 4.4.0-alt2 | ALT-PU-2019-1628-1 | 226958 | Fixed |
| libtiff | p9 | 4.0.10.0.57.f9fc01c3-alt1 | 4.0.10.0.57.f9fc01c3-alt1 | ALT-PU-2019-1628-1 | 226958 | Fixed |
| libtiff | c10f1 | 4.0.10.0.57.f9fc01c3-alt1 | 4.4.0-alt2 | ALT-PU-2019-1628-1 | 226958 | Fixed |
| libtiff | c9f2 | 4.0.10.0.57.f9fc01c3-alt1 | 4.3.0-alt1 | ALT-PU-2019-1628-1 | 226958 | Fixed |
| libtiff | p11 | 4.0.10.0.57.f9fc01c3-alt1 | 4.4.0-alt4 | ALT-PU-2019-1628-1 | 226958 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1185815 |
|
| http://www.conostix.com/pub/adv/CVE-2014-8129-LibTIFF-Out-of-bounds_Reads_and_Writes.txt |
|
| http://support.apple.com/kb/HT204942 |
|
| http://support.apple.com/kb/HT204941 |
|
| [oss-security] 20150124 Multiple vulnerabilities in LibTIFF and associated tools |
|
| APPLE-SA-2015-06-30-2 |
|
| APPLE-SA-2015-06-30-1 |
|
| http://bugzilla.maptools.org/show_bug.cgi?id=2488 |
|
| http://bugzilla.maptools.org/show_bug.cgi?id=2487 |
|
| DSA-3273 |
|
| GLSA-201701-16 |
|
| 1032760 |
|
| 72352 |
|
| RHSA-2016:1547 |
|
| RHSA-2016:1546 |
|