Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2021.0098
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2021-0098)
Zusammenfassung:	The remote host is missing an update for the 'libtiff' package(s) announced via the MGASA-2021-0098 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libtiff' package(s) announced via the MGASA-2021-0098 advisory. Vulnerability Insight: The updated libtiff packages fix security vulnerabilities: - Integer overflow in tif_getimage.c (CVE-2020-35523). - Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524). - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'TIFFVGetField' function in the component 'libtiff/tif_dir.c'. (CVE-2020-19143) - Memory allocation failure in tiff2rgba (CVE-2020-35521) - Memory allocation failure in tiff2rgba (CVE-2020-35522) Affected Software/OS: 'libtiff' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-19143 Debian Security Information: DSA-4997 (Google Search) https://www.debian.org/security/2021/dsa-4997 http://bugzilla.maptools.org/show_bug.cgi?id=2851 https://gitlab.com/libtiff/libtiff/-/issues/158 https://gitlab.com/libtiff/libtiff/-/merge_requests/119 Common Vulnerability Exposure (CVE) ID: CVE-2020-35521 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BMHBYFMX3D5VGR6Y3RXTTH3Q4NF4E6IG/ https://security.gentoo.org/glsa/202104-06 https://bugzilla.redhat.com/show_bug.cgi?id=1932034 Common Vulnerability Exposure (CVE) ID: CVE-2020-35522 https://bugzilla.redhat.com/show_bug.cgi?id=1932037 Common Vulnerability Exposure (CVE) ID: CVE-2020-35523 Debian Security Information: DSA-4869 (Google Search) https://www.debian.org/security/2021/dsa-4869 https://bugzilla.redhat.com/show_bug.cgi?id=1932040 https://gitlab.com/libtiff/libtiff/-/commit/c8d613ef497058fe653c467fc84c70a62a4a71b2 https://gitlab.com/libtiff/libtiff/-/merge_requests/160 https://lists.debian.org/debian-lts-announce/2021/06/msg00023.html Common Vulnerability Exposure (CVE) ID: CVE-2020-35524 https://security.netapp.com/advisory/ntap-20210521-0009/ https://bugzilla.redhat.com/show_bug.cgi?id=1932044 https://gitlab.com/libtiff/libtiff/-/merge_requests/159 https://gitlab.com/rzkn/libtiff/-/commit/7be2e452ddcf6d7abca88f41d3761e6edab72b22
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.