Test ID:	1.3.6.1.4.1.25623.1.1.4.2016.0160.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2016:0160-1)
Summary:	The remote host is missing an update for the 'tiff' package(s) announced via the SUSE-SU-2016:0160-1 advisory.
Description:	Summary: The remote host is missing an update for the 'tiff' package(s) announced via the SUSE-SU-2016:0160-1 advisory. Vulnerability Insight: This update to tiff 4.0.6 fixes the following issues: - CVE-2015-7554: Out-of-bounds write in the thumbnail and tiffcmp tools allowed attacker to cause a denial of service or have unspecified further impact (bsc#960341) - bsc#942690: potential out-of-bound write in NeXTDecode() (#2508) Affected Software/OS: 'tiff' package(s) on SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12-SP1, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 12-SP1, SUSE Linux Enterprise Server for SAP Applications 12, SUSE Linux Enterprise Server for SAP Applications 12-SP1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7554 20151226 libtiff: invalid write (CVE-2015-7554) http://seclists.org/fulldisclosure/2015/Dec/119 http://www.securityfocus.com/archive/1/537205/100/0/threaded 79699 http://www.securityfocus.com/bid/79699 GLSA-201701-16 https://security.gentoo.org/glsa/201701-16 RHSA-2016:1546 http://rhn.redhat.com/errata/RHSA-2016-1546.html RHSA-2016:1547 http://rhn.redhat.com/errata/RHSA-2016-1547.html [oss-security] 20151226 libtiff: invalid write (CVE-2015-7554) http://www.openwall.com/lists/oss-security/2015/12/26/7 http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html openSUSE-SU-2016:0212 http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html openSUSE-SU-2016:0215 http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html openSUSE-SU-2016:0252 http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.