CVSS: 5.5EPSS: 3%CPEs: 3EXPL: 0CVE-2015-8683 – libtiff: Out-of-bounds when reading CIE Lab image format files
https://notcve.org/view.php?id=CVE-2015-8683
The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. La función putcontig8bitCIELab en tif_getimage.c en LibTIFF 4.0.6 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango) a través de una imagen TIFF comprimida. • http://rhn.redhat.com/errata/RHSA-2016-1546.html http://rhn.redhat.com/errata/RHSA-2016-1547.html http://www.debian.org/security/2016/dsa-3467 http://www.openwall.com/lists/oss-security/2015/12/25/1 http://www.openwall.com/lists/oss-security/2015/12/26/1 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 2%CPEs: 1EXPL: 0CVE-2015-8665 – libtiff: Out-of-bounds read in tif_getimage.c
https://notcve.org/view.php?id=CVE-2015-8665
tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. tif_getimage.c en LibTIFF 4.0.6 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rangos) a través de la etiqueta SamplesPerPixel en una imagen TIFF. • http://rhn.redhat.com/errata/RHSA-2016-1546.html http://rhn.redhat.com/errata/RHSA-2016-1547.html http://www.debian.org/security/2016/dsa-3467 http://www.openwall.com/lists/oss-security/2015/12/24/2 http://www.openwall.com/lists/oss-security/2015/12/24/4 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read •
CVSS: 6.8EPSS: 3%CPEs: 3EXPL: 0CVE-2015-8784 – libtiff: out-of-bound write in NeXTDecode()
https://notcve.org/view.php?id=CVE-2015-8784
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif. La función NeXTDecode en tif_next.c en LibTIFF permite a atacantes remotos provocar una denegación de servicio (escritura fuera de rango) a través de una imagen TIFF manipulada, según lo demostrado por libtiff5.tif. • http://bugzilla.maptools.org/show_bug.cgi?id=2508 http://rhn.redhat.com/errata/RHSA-2016-1546.html http://rhn.redhat.com/errata/RHSA-2016-1547.html http://www.debian.org/security/2016/dsa-3467 http://www.openwall.com/lists/oss-security/2016/01/24/4 http://www.openwall.com/lists/oss-security/2016/01/24/8 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http:/& • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-8781 – libtiff: invalid assertion
https://notcve.org/view.php?id=CVE-2015-8781
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782. tif_luv.c en libtiff permite a atacantes provocar una denegación de servicio (escritura fuera de rango) a través de un número no válido de muestras por píxel en una imagen TIFF comprimida con LogL, una vulnerabilidad diferente a CVE-2015-8782. • http://bugzilla.maptools.org/show_bug.cgi?id=2522#c0 http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html http://rhn.redhat.com/errata/RHSA-2016-1546.html http://rhn.redhat.com/errata/RHSA-2016-1547.html http://www.debian.org/security/2016/dsa-3467 http://www.openwall.com/lists/oss-security/2016/01/24/3 http://www.openwall.com/lists/oss-security/2016/01/24/7 http://www.oracle.com& • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-8782 – libtiff: invalid assertion
https://notcve.org/view.php?id=CVE-2015-8782
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781. tif_luv.c en libtiff permite a atacantes provocar una denegación de servicio (escrituras fuera de rango) a través de una imagen TIFF manipulada, una vulnerabilidad diferente a CVE-2015-8781. • http://bugzilla.maptools.org/show_bug.cgi?id=2522 http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html http://rhn.redhat.com/errata/RHSA-2016-1546.html http://rhn.redhat.com/errata/RHSA-2016-1547.html http://www.debian.org/security/2016/dsa-3467 http://www.openwall.com/lists/oss-security/2016/01/24/3 http://www.openwall.com/lists/oss-security/2016/01/24/7 http://www.oracle.com/te • CWE-787: Out-of-bounds Write •