Bugzilla – Bug 1156749
VUL-1: CVE-2015-8665: tiff: Out-of-bounds read in tif_getimage.c
Last modified: 2024-07-04 07:18:13 UTC
CVE-2015-8665 An Out-of-bounds read flaw was found in libtiff. An attacker could create a specially-crafted TIFF file, which could cause libtiff to crash. Reference: http://www.openwall.com/lists/oss-security/2015/12/24/4 References: https://bugzilla.redhat.com/show_bug.cgi?id=1294444 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8665 http://www.openwall.com/lists/oss-security/2015/12/24/2 http://seclists.org/oss-sec/2015/q4/580 http://www.openwall.com/lists/oss-security/2015/12/24/4 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808968 https://access.redhat.com/security/cve/CVE-2015-8665 http://rhn.redhat.com/errata/RHSA-2016-1547.html http://rhn.redhat.com/errata/RHSA-2016-1546.html http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8665.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8665 http://www.ubuntu.com/usn/USN-2939-1 http://cve.mitre.org/cve/request_id.html http://www.securitytracker.com/id/1035508 http://www.securityfocus.com/bid/79728
Created attachment 824131 [details] tiff-3.x-CVE-2015-8665_8683.patch
submitted
SUSE-SU-2022:14888-1: An update that fixes 6 vulnerabilities is now available. Category: security (important) Bug References: 1156749,1156754,1182808,1182809,1182811,1182812 CVE References: CVE-2015-8665,CVE-2015-8683,CVE-2020-35521,CVE-2020-35522,CVE-2020-35523,CVE-2020-35524 JIRA References: Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): tiff-3.8.2-141.169.34.1 SUSE Linux Enterprise Point of Sale 11-SP3 (src): tiff-3.8.2-141.169.34.1 SUSE Linux Enterprise Debuginfo 11-SP4 (src): tiff-3.8.2-141.169.34.1 SUSE Linux Enterprise Debuginfo 11-SP3 (src): tiff-3.8.2-141.169.34.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Resolved