Lucene search
RedHatRHSA-2008:0863HistoryAug 28, 2008 - 12:00 a.m.
(RHSA-2008:0863) Important: libtiff security update
2008-08-2800:00:00
access.redhat.com
13
0.008 Low
EPSS
Percentile
81.9%
The libtiff packages contain a library of functions for manipulating Tagged
Image File Format (TIFF) files.
Multiple uses of uninitialized values were discovered in libtiffβs
Lempel-Ziv-Welch (LZW) compression algorithm decoder. An attacker could
create a carefully crafted LZW-encoded TIFF file that would cause an
application linked with libtiff to crash or, possibly, execute arbitrary
code. (CVE-2008-2327)
Red Hat would like to thank Drew Yao of the Apple Product Security team for
reporting this issue.
All libtiff users are advised to upgrade to these updated packages, which
contain backported patches to resolve this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 2 | ia64 | libtiff | <Β 3.5.7-31.el2 | libtiff-3.5.7-31.el2.ia64.rpm |
| RedHat | 3 | s390 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.s390.rpm |
| RedHat | 3 | x86_64 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.x86_64.rpm |
| RedHat | 3 | x86_64 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.x86_64.rpm |
| RedHat | 3 | ppc | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.ppc.rpm |
| RedHat | 3 | s390 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.s390.rpm |
| RedHat | 2 | ia64 | libtiff-devel | <Β 3.5.7-31.el2 | libtiff-devel-3.5.7-31.el2.ia64.rpm |
| RedHat | 3 | i386 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.i386.rpm |
| RedHat | 3 | ia64 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.ia64.rpm |
| RedHat | 3 | ppc | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.ppc.rpm |
Related
nessus
nessus
Fedora 8 : libtiff-3.8.2-11.fc8 (2008-7388)
2008-09-10 00:00:00
RHEL 5 : libtiff (RHSA-2008:0847)
2008-08-30 00:00:00
openSUSE Security Update : libtiff (libtiff-162)
2009-07-21 00:00:00
openvas
openvas
Mandriva Update for libtiff MDVSA-2008:184 (libtiff)
2009-04-09 00:00:00
Fedora Update for libtiff FEDORA-2008-7388
2009-02-17 00:00:00
CentOS Update for libtiff CESA-2008:0863 centos3 i386
2009-02-27 00:00:00
securityvulns
securityvulns
[ MDVSA-2008:184 ] libtiff
2008-09-04 00:00:00
libtiff memory corruption
2008-09-04 00:00:00
gentoo
gentoo
libTIFF: User-assisted execution of arbitrary code
2008-09-08 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt2
2008-08-31 00:00:00
Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt2
2008-08-31 00:00:00
oraclelinux
oraclelinux
libtiff security and bug fix update
2008-08-28 00:00:00
libtiff security update
2008-08-28 00:00:00
libtiff security and bug fix update
2008-08-28 00:00:00
debian
debian
[SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution
2008-08-26 16:22:23
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:34:39
seebug
seebug
LibTIFF 'tif_lzw.c'θΏη¨ζ΄ζ°δΈζΊ’ζΌζ΄
2008-08-27 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: libtiff-3.8.2-11.fc8
2008-09-10 06:39:57
[SECURITY] Fedora 9 Update: libtiff-3.8.2-11.fc9
2008-09-10 06:37:24
[SECURITY] Fedora 9 Update: libtiff-3.8.2-13.fc9
2009-07-03 19:41:40
centos
centos
libtiff security update
2008-10-03 18:34:01
libtiff security update
2008-08-29 00:41:41
libtiff security update
2008-08-29 21:30:43
cve
cve
CVE-2008-2327
2008-08-27 20:41:00
CVE-2009-2285
2009-07-01 13:00:01
prion
prion
Buffer overflow
2008-08-27 20:41:00
Buffer overflow
2009-07-01 13:00:00
redhat
redhat
(RHSA-2008:0847) Important: libtiff security and bug fix update
2008-08-28 00:00:00
(RHSA-2008:0848) Important: libtiff security and bug fix update
2008-08-28 00:00:00
debiancve
debiancve
CVE-2008-2327
2008-08-27 20:41:00
CVE-2009-2285
2009-07-01 13:00:01
ubuntucve
ubuntucve
CVE-2008-2327
2008-08-27 00:00:00
CVE-2009-2285
2009-07-01 00:00:00
nvd
nvd
CVE-2008-2327
2008-08-27 20:41:00
CVE-2009-2285
2009-07-01 13:00:01
ubuntu
ubuntu
tiff vulnerability
2008-09-02 00:00:00
cvelist
cvelist
CVE-2008-2327
2008-08-27 20:00:00
CVE-2009-2285
2009-07-01 12:26:00
vmware
vmware
Updated ESX packages for libxml2, ucd-snmp, libtiff
2008-10-31 00:00:00
Updated ESX packages for libxml2, ucd-snmp, libtiff
2008-10-31 00:00:00