csaf_suse - suse-su-2016:2527-1

Vulnerability from csaf_suse

Published

2016-10-13 11:59

Modified

2016-10-13 11:59

Summary

Security update for tiff

Notes

Title of the patch

Security update for tiff

Description of the patch

This update for tiff fixes the following issues: - CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba (bsc#974449) - Various out-of-bound write vulnerabilities with unspecified impact (MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098) - CVE-2016-5314: Specially crafted TIFF images could trigger a crash that could result in DoS (bsc#984831) - CVE-2016-5316: Specially crafted TIFF images could trigger a crash in the rgb2ycbcr tool, leading to Doa (bsc#984837) - CVE-2016-5317: Specially crafted TIFF images could trigger a crash through an out of bound write (bsc#984842) - CVE-2016-5320: Specially crafted TIFF images could trigger a crash or potentially allow remote code execution when using the rgb2ycbcr command (bsc#984808) - CVE-2016-5875: Specially crafted TIFF images could trigger could allow arbitrary code execution (bsc#987351) - CVE-2016-3623: Specially crafted TIFF images could trigger a crash in rgb2ycbcr (bsc#974618) - CVE-2016-3945: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution via tiff2rgba (bsc#974614) - CVE-2016-3990: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution (bsc#975069) - CVE-2016-3186: Specially crafted TIFF imaged could trigger a crash in the gif2tiff command via a buffer overflow (bsc#973340)

Patchnames

sdksp4-tiff-12785,slessp4-tiff-12785

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for tiff",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for tiff fixes the following issues:\n\n- CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba (bsc#974449)\n- Various out-of-bound write vulnerabilities with unspecified impact (MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098)\n- CVE-2016-5314: Specially crafted TIFF images could trigger a crash that could result in DoS (bsc#984831)\n- CVE-2016-5316: Specially crafted TIFF images could trigger a crash in the rgb2ycbcr tool, leading to Doa (bsc#984837)\n- CVE-2016-5317: Specially crafted TIFF images could trigger a crash through an out of bound write (bsc#984842)\n- CVE-2016-5320: Specially crafted TIFF images could trigger a crash or potentially allow remote code execution when using the rgb2ycbcr command (bsc#984808)\n- CVE-2016-5875: Specially crafted TIFF images could trigger could allow arbitrary code execution (bsc#987351)\n- CVE-2016-3623: Specially crafted TIFF images could trigger a crash in rgb2ycbcr (bsc#974618)\n- CVE-2016-3945: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution via tiff2rgba (bsc#974614)\n- CVE-2016-3990: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution (bsc#975069)\n- CVE-2016-3186: Specially crafted TIFF imaged could trigger a crash in the gif2tiff command via a buffer overflow (bsc#973340)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-tiff-12785,slessp4-tiff-12785",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2527-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2527-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162527-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2527-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 973340",
        "url": "https://bugzilla.suse.com/973340"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974449",
        "url": "https://bugzilla.suse.com/974449"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974614",
        "url": "https://bugzilla.suse.com/974614"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974618",
        "url": "https://bugzilla.suse.com/974618"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975069",
        "url": "https://bugzilla.suse.com/975069"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 984808",
        "url": "https://bugzilla.suse.com/984808"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 984831",
        "url": "https://bugzilla.suse.com/984831"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 984837",
        "url": "https://bugzilla.suse.com/984837"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 984842",
        "url": "https://bugzilla.suse.com/984842"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 987351",
        "url": "https://bugzilla.suse.com/987351"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3186 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3186/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3622 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3622/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3623 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3623/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3945 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3945/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3990 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3990/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5314 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5314/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5316 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5316/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5317 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5317/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5320 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5320/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5875 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5875/"
      }
    ],
    "title": "Security update for tiff",
    "tracking": {
      "current_release_date": "2016-10-13T11:59:37Z",
      "generator": {
        "date": "2016-10-13T11:59:37Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2527-1",
      "initial_release_date": "2016-10-13T11:59:37Z",
      "revision_history": [
        {
          "date": "2016-10-13T11:59:37Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.168.1.i586",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.168.1.i586",
                  "product_id": "libtiff-devel-3.8.2-141.168.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.168.1.i586",
                "product": {
                  "name": "libtiff3-3.8.2-141.168.1.i586",
                  "product_id": "libtiff3-3.8.2-141.168.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.168.1.i586",
                "product": {
                  "name": "tiff-3.8.2-141.168.1.i586",
                  "product_id": "tiff-3.8.2-141.168.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.168.1.ia64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.168.1.ia64",
                  "product_id": "libtiff-devel-3.8.2-141.168.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.168.1.ia64",
                "product": {
                  "name": "libtiff3-3.8.2-141.168.1.ia64",
                  "product_id": "libtiff3-3.8.2-141.168.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-x86-3.8.2-141.168.1.ia64",
                "product": {
                  "name": "libtiff3-x86-3.8.2-141.168.1.ia64",
                  "product_id": "libtiff3-x86-3.8.2-141.168.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.168.1.ia64",
                "product": {
                  "name": "tiff-3.8.2-141.168.1.ia64",
                  "product_id": "tiff-3.8.2-141.168.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.168.1.ppc64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.168.1.ppc64",
                  "product_id": "libtiff-devel-3.8.2-141.168.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.168.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.168.1.ppc64",
                "product": {
                  "name": "libtiff3-3.8.2-141.168.1.ppc64",
                  "product_id": "libtiff3-3.8.2-141.168.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.168.1.ppc64",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.168.1.ppc64",
                  "product_id": "libtiff3-32bit-3.8.2-141.168.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.168.1.ppc64",
                "product": {
                  "name": "tiff-3.8.2-141.168.1.ppc64",
                  "product_id": "tiff-3.8.2-141.168.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.168.1.s390x",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.168.1.s390x",
                  "product_id": "libtiff-devel-3.8.2-141.168.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.168.1.s390x",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.168.1.s390x",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.168.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.168.1.s390x",
                "product": {
                  "name": "libtiff3-3.8.2-141.168.1.s390x",
                  "product_id": "libtiff3-3.8.2-141.168.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.168.1.s390x",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.168.1.s390x",
                  "product_id": "libtiff3-32bit-3.8.2-141.168.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.168.1.s390x",
                "product": {
                  "name": "tiff-3.8.2-141.168.1.s390x",
                  "product_id": "tiff-3.8.2-141.168.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.168.1.x86_64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.168.1.x86_64",
                  "product_id": "libtiff-devel-3.8.2-141.168.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.168.1.x86_64",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.168.1.x86_64",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.168.1.x86_64",
                "product": {
                  "name": "libtiff3-3.8.2-141.168.1.x86_64",
                  "product_id": "libtiff3-3.8.2-141.168.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.168.1.x86_64",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.168.1.x86_64",
                  "product_id": "libtiff3-32bit-3.8.2-141.168.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.168.1.x86_64",
                "product": {
                  "name": "tiff-3.8.2-141.168.1.x86_64",
                  "product_id": "tiff-3.8.2-141.168.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.168.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586"
        },
        "product_reference": "libtiff-devel-3.8.2-141.168.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x"
        },
        "product_reference": "libtiff-devel-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-x86-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64"
        },
        "product_reference": "libtiff3-x86-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586"
        },
        "product_reference": "tiff-3.8.2-141.168.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64"
        },
        "product_reference": "tiff-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "tiff-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x"
        },
        "product_reference": "tiff-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "tiff-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "libtiff3-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-x86-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64"
        },
        "product_reference": "libtiff3-x86-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586"
        },
        "product_reference": "tiff-3.8.2-141.168.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64"
        },
        "product_reference": "tiff-3.8.2-141.168.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64"
        },
        "product_reference": "tiff-3.8.2-141.168.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x"
        },
        "product_reference": "tiff-3.8.2-141.168.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.168.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64"
        },
        "product_reference": "tiff-3.8.2-141.168.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-3186",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3186"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3186",
          "url": "https://www.suse.com/security/cve/CVE-2016-3186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 973340 for CVE-2016-3186",
          "url": "https://bugzilla.suse.com/973340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983268 for CVE-2016-3186",
          "url": "https://bugzilla.suse.com/983268"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3186"
    },
    {
      "cve": "CVE-2016-3622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3622",
          "url": "https://www.suse.com/security/cve/CVE-2016-3622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974449 for CVE-2016-3622",
          "url": "https://bugzilla.suse.com/974449"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3622"
    },
    {
      "cve": "CVE-2016-3623",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3623"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3623",
          "url": "https://www.suse.com/security/cve/CVE-2016-3623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974617 for CVE-2016-3623",
          "url": "https://bugzilla.suse.com/974617"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974618 for CVE-2016-3623",
          "url": "https://bugzilla.suse.com/974618"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3623"
    },
    {
      "cve": "CVE-2016-3945",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3945"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3945",
          "url": "https://www.suse.com/security/cve/CVE-2016-3945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974614 for CVE-2016-3945",
          "url": "https://bugzilla.suse.com/974614"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3945"
    },
    {
      "cve": "CVE-2016-3990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3990",
          "url": "https://www.suse.com/security/cve/CVE-2016-3990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 975069 for CVE-2016-3990",
          "url": "https://bugzilla.suse.com/975069"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3990"
    },
    {
      "cve": "CVE-2016-5314",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5314"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5314",
          "url": "https://www.suse.com/security/cve/CVE-2016-5314"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 984831 for CVE-2016-5314",
          "url": "https://bugzilla.suse.com/984831"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987351 for CVE-2016-5314",
          "url": "https://bugzilla.suse.com/987351"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5314"
    },
    {
      "cve": "CVE-2016-5316",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5316"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5316",
          "url": "https://www.suse.com/security/cve/CVE-2016-5316"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 984837 for CVE-2016-5316",
          "url": "https://bugzilla.suse.com/984837"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5316"
    },
    {
      "cve": "CVE-2016-5317",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5317"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5317",
          "url": "https://www.suse.com/security/cve/CVE-2016-5317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 984842 for CVE-2016-5317",
          "url": "https://bugzilla.suse.com/984842"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5317"
    },
    {
      "cve": "CVE-2016-5320",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5320"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5320",
          "url": "https://www.suse.com/security/cve/CVE-2016-5320"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007284 for CVE-2016-5320",
          "url": "https://bugzilla.suse.com/1007284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 984808 for CVE-2016-5320",
          "url": "https://bugzilla.suse.com/984808"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987351 for CVE-2016-5320",
          "url": "https://bugzilla.suse.com/987351"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5320"
    },
    {
      "cve": "CVE-2016-5875",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5875"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5875",
          "url": "https://www.suse.com/security/cve/CVE-2016-5875"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007284 for CVE-2016-5875",
          "url": "https://bugzilla.suse.com/1007284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 984809 for CVE-2016-5875",
          "url": "https://bugzilla.suse.com/984809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 984831 for CVE-2016-5875",
          "url": "https://bugzilla.suse.com/984831"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987351 for CVE-2016-5875",
          "url": "https://bugzilla.suse.com/987351"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.168.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.168.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-13T11:59:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5875"
    }
  ]
}

cve-2016-3623

Vulnerability from cvelistv5

Published

2016-10-03 16:00

Modified

2024-08-06 00:03

Severity ?

Summary

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/85952	vdb-entry, x_refsource_BID
	http://bugzilla.maptools.org/show_bug.cgi?id=2569	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/04/08/3	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.422Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "85952",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85952"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2569"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "openSUSE-SU-2016:2275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
          },
          {
            "name": "[oss-security] 20160408 CVE-2016-3623 libtiff: Divide By Zero in the rgb2ycbcr tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/08/3"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "85952",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85952"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2569"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "openSUSE-SU-2016:2275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
        },
        {
          "name": "[oss-security] 20160408 CVE-2016-3623 libtiff: Divide By Zero in the rgb2ycbcr tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/08/3"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3623",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "85952",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85952"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2569",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2569"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "openSUSE-SU-2016:2275",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
            },
            {
              "name": "[oss-security] 20160408 CVE-2016-3623 libtiff: Divide By Zero in the rgb2ycbcr tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/08/3"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3623",
    "datePublished": "2016-10-03T16:00:00",
    "dateReserved": "2016-03-21T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-5875

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2018-03-12T01:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5875",
    "datePublished": "2018-03-12T02:00:00",
    "dateRejected": "2018-03-12T01:57:01",
    "dateReserved": "2016-06-29T00:00:00",
    "dateUpdated": "2018-03-12T01:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

cve-2016-5317

Vulnerability from cvelistv5

Published

2017-01-20 15:00

Modified

2024-08-06 01:01

Severity ?

Summary

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/91208	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/06/15/10	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/06/15/5	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:01:00.165Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "91208",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91208"
          },
          {
            "name": "openSUSE-SU-2016:2321",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
          },
          {
            "name": "[oss-security] 20160614 CVE-2016-5317: GNOME nautilus: crash occurs when generating a thumbnail for a crafted TIFF image",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/15/10"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "openSUSE-SU-2016:1889",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
          },
          {
            "name": "[oss-security] 20160615 CVE-2016-5317: GNOME nautilus: crash occurs when generating a thumbnail for a crafted TIFF image",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/15/5"
          },
          {
            "name": "openSUSE-SU-2016:2375",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "91208",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91208"
        },
        {
          "name": "openSUSE-SU-2016:2321",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
        },
        {
          "name": "[oss-security] 20160614 CVE-2016-5317: GNOME nautilus: crash occurs when generating a thumbnail for a crafted TIFF image",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/15/10"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "openSUSE-SU-2016:1889",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
        },
        {
          "name": "[oss-security] 20160615 CVE-2016-5317: GNOME nautilus: crash occurs when generating a thumbnail for a crafted TIFF image",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/15/5"
        },
        {
          "name": "openSUSE-SU-2016:2375",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5317",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "91208",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91208"
            },
            {
              "name": "openSUSE-SU-2016:2321",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
            },
            {
              "name": "[oss-security] 20160614 CVE-2016-5317: GNOME nautilus: crash occurs when generating a thumbnail for a crafted TIFF image",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/15/10"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "openSUSE-SU-2016:1889",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
            },
            {
              "name": "[oss-security] 20160615 CVE-2016-5317: GNOME nautilus: crash occurs when generating a thumbnail for a crafted TIFF image",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/15/5"
            },
            {
              "name": "openSUSE-SU-2016:2375",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5317",
    "datePublished": "2017-01-20T15:00:00",
    "dateReserved": "2016-06-06T00:00:00",
    "dateUpdated": "2024-08-06T01:01:00.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-5316

Vulnerability from cvelistv5

Published

2017-01-20 15:00

Modified

2024-08-06 01:00

Severity ?

Summary

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/91203	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/06/15/3	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:58.066Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "91203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91203"
          },
          {
            "name": "openSUSE-SU-2016:2321",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "openSUSE-SU-2016:1889",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
          },
          {
            "name": "openSUSE-SU-2016:2375",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
          },
          {
            "name": "[oss-security] 20160615 CVE-2016-5316: libtiff 4.0.6  tif_pixarlog.c:  PixarLogCleanup() Segmentation fault",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/15/3"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "91203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91203"
        },
        {
          "name": "openSUSE-SU-2016:2321",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "openSUSE-SU-2016:1889",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
        },
        {
          "name": "openSUSE-SU-2016:2375",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
        },
        {
          "name": "[oss-security] 20160615 CVE-2016-5316: libtiff 4.0.6  tif_pixarlog.c:  PixarLogCleanup() Segmentation fault",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/15/3"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5316",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "91203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91203"
            },
            {
              "name": "openSUSE-SU-2016:2321",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "openSUSE-SU-2016:1889",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
            },
            {
              "name": "openSUSE-SU-2016:2375",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
            },
            {
              "name": "[oss-security] 20160615 CVE-2016-5316: libtiff 4.0.6  tif_pixarlog.c:  PixarLogCleanup() Segmentation fault",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/15/3"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5316",
    "datePublished": "2017-01-20T15:00:00",
    "dateReserved": "2016-06-06T00:00:00",
    "dateUpdated": "2024-08-06T01:00:58.066Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-5314

Vulnerability from cvelistv5

Published

2018-03-12 02:00

Modified

2024-08-06 01:00

Severity ?

Summary

Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/91195	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/06/15/1	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/91245	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1346687	x_refsource_CONFIRM
	https://github.com/vadz/libtiff/commit/391e77fcd217e78b2c51342ac3ddb7100ecacdd2	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/06/15/9	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/06/30/3	mailing-list, x_refsource_MLIST
	http://bugzilla.maptools.org/show_bug.cgi?id=2554	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:58.231Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3762"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "openSUSE-SU-2016:3035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html"
          },
          {
            "name": "91195",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91195"
          },
          {
            "name": "openSUSE-SU-2016:2321",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
          },
          {
            "name": "[oss-security] 20160615 CVE-2016-5314: libtiff 4.0.6 PixarLogDecode() out-of-bound writes",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/15/1"
          },
          {
            "name": "91245",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91245"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1346687"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vadz/libtiff/commit/391e77fcd217e78b2c51342ac3ddb7100ecacdd2"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "openSUSE-SU-2016:1889",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
          },
          {
            "name": "openSUSE-SU-2016:2375",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
          },
          {
            "name": "[oss-security] 20160615 CVE-2016-5320: libtiff 4.0.6 rgb2ycbcr: command excution",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/15/9"
          },
          {
            "name": "[oss-security] 20160630 Re: Re: CVE request: Heap-based buffer overflow in LibTIFF when using the PixarLog compression format",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/30/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2554"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-12T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3762"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "openSUSE-SU-2016:3035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html"
        },
        {
          "name": "91195",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91195"
        },
        {
          "name": "openSUSE-SU-2016:2321",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
        },
        {
          "name": "[oss-security] 20160615 CVE-2016-5314: libtiff 4.0.6 PixarLogDecode() out-of-bound writes",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/15/1"
        },
        {
          "name": "91245",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91245"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1346687"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vadz/libtiff/commit/391e77fcd217e78b2c51342ac3ddb7100ecacdd2"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "openSUSE-SU-2016:1889",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
        },
        {
          "name": "openSUSE-SU-2016:2375",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
        },
        {
          "name": "[oss-security] 20160615 CVE-2016-5320: libtiff 4.0.6 rgb2ycbcr: command excution",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/15/9"
        },
        {
          "name": "[oss-security] 20160630 Re: Re: CVE request: Heap-based buffer overflow in LibTIFF when using the PixarLog compression format",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/30/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2554"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5314",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3762"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "openSUSE-SU-2016:3035",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html"
            },
            {
              "name": "91195",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91195"
            },
            {
              "name": "openSUSE-SU-2016:2321",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html"
            },
            {
              "name": "[oss-security] 20160615 CVE-2016-5314: libtiff 4.0.6 PixarLogDecode() out-of-bound writes",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/15/1"
            },
            {
              "name": "91245",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91245"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1346687",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1346687"
            },
            {
              "name": "https://github.com/vadz/libtiff/commit/391e77fcd217e78b2c51342ac3ddb7100ecacdd2",
              "refsource": "CONFIRM",
              "url": "https://github.com/vadz/libtiff/commit/391e77fcd217e78b2c51342ac3ddb7100ecacdd2"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "openSUSE-SU-2016:1889",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html"
            },
            {
              "name": "openSUSE-SU-2016:2375",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html"
            },
            {
              "name": "[oss-security] 20160615 CVE-2016-5320: libtiff 4.0.6 rgb2ycbcr: command excution",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/15/9"
            },
            {
              "name": "[oss-security] 20160630 Re: Re: CVE request: Heap-based buffer overflow in LibTIFF when using the PixarLog compression format",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/30/3"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2554",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2554"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5314",
    "datePublished": "2018-03-12T02:00:00",
    "dateReserved": "2016-06-06T00:00:00",
    "dateUpdated": "2024-08-06T01:00:58.231Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3186

Vulnerability from cvelistv5

Published

2016-04-19 14:00

Modified

2024-08-05 23:47

Severity ?

Summary

Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1319503	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3606-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1035442	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:2053	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:47:58.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1319503"
          },
          {
            "name": "openSUSE-SU-2016:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html"
          },
          {
            "name": "USN-3606-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3606-1/"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "1035442",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035442"
          },
          {
            "name": "openSUSE-SU-2016:1103",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html"
          },
          {
            "name": "RHSA-2019:2053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2053"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:33",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1319503"
        },
        {
          "name": "openSUSE-SU-2016:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html"
        },
        {
          "name": "USN-3606-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3606-1/"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "1035442",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035442"
        },
        {
          "name": "openSUSE-SU-2016:1103",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html"
        },
        {
          "name": "RHSA-2019:2053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2053"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3186",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1319503",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1319503"
            },
            {
              "name": "openSUSE-SU-2016:1081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html"
            },
            {
              "name": "USN-3606-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3606-1/"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "1035442",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035442"
            },
            {
              "name": "openSUSE-SU-2016:1103",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html"
            },
            {
              "name": "RHSA-2019:2053",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2053"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3186",
    "datePublished": "2016-04-19T14:00:00",
    "dateReserved": "2016-03-15T00:00:00",
    "dateUpdated": "2024-08-05T23:47:58.971Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3990

Vulnerability from cvelistv5

Published

2016-09-21 18:00

Modified

2024-08-06 00:10

Severity ?

Summary

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/86000	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1547.html	vendor-advisory, x_refsource_REDHAT
	http://bugzilla.maptools.org/show_bug.cgi?id=2544	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/04/12/2	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-1546.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1326246	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:10:32.027Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "86000",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/86000"
          },
          {
            "name": "RHSA-2016:1547",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2544"
          },
          {
            "name": "[oss-security] 20160412 CVE-2016-3990 : out-of-bounds write in horizontalDifference8() in tiffcp tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/12/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "openSUSE-SU-2016:2275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
          },
          {
            "name": "RHSA-2016:1546",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1326246"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "86000",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/86000"
        },
        {
          "name": "RHSA-2016:1547",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2544"
        },
        {
          "name": "[oss-security] 20160412 CVE-2016-3990 : out-of-bounds write in horizontalDifference8() in tiffcp tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/12/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "openSUSE-SU-2016:2275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
        },
        {
          "name": "RHSA-2016:1546",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1326246"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3990",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "86000",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/86000"
            },
            {
              "name": "RHSA-2016:1547",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2544",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2544"
            },
            {
              "name": "[oss-security] 20160412 CVE-2016-3990 : out-of-bounds write in horizontalDifference8() in tiffcp tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/12/2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "openSUSE-SU-2016:2275",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
            },
            {
              "name": "RHSA-2016:1546",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1326246",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1326246"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3990",
    "datePublished": "2016-09-21T18:00:00",
    "dateReserved": "2016-04-08T00:00:00",
    "dateUpdated": "2024-08-06T00:10:32.027Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3622

Vulnerability from cvelistv5

Published

2016-10-03 16:00

Modified

2024-08-06 00:03

Severity ?

Summary

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1035508	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/85917	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/04/07/4	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.340Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1035508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035508"
          },
          {
            "name": "85917",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85917"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "[oss-security] 20160407 CVE-2016-3622 libtiff: Divide By Zero in the tiff2rgba tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/07/4"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1035508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035508"
        },
        {
          "name": "85917",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85917"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "[oss-security] 20160407 CVE-2016-3622 libtiff: Divide By Zero in the tiff2rgba tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/07/4"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3622",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1035508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035508"
            },
            {
              "name": "85917",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85917"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "[oss-security] 20160407 CVE-2016-3622 libtiff: Divide By Zero in the tiff2rgba tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/07/4"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3622",
    "datePublished": "2016-10-03T16:00:00",
    "dateReserved": "2016-03-21T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.340Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-5320

Vulnerability from cvelistv5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2018-03-12T01:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5320",
    "datePublished": "2018-03-12T02:00:00",
    "dateRejected": "2018-03-12T01:57:01",
    "dateReserved": "2016-06-06T00:00:00",
    "dateUpdated": "2018-03-12T01:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

cve-2016-3945

Vulnerability from cvelistv5

Published

2016-09-21 18:00

Modified

2024-08-06 00:10

Severity ?

Summary

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/04/08/6	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2016-1547.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1325093	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-1546.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/85960	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN
	http://bugzilla.maptools.org/show_bug.cgi?id=2545	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:10:31.904Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "[oss-security] 20160408 CVE-2016-3945 libtiff: Out-of-bounds Write in the tiff2rgba tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/08/6"
          },
          {
            "name": "RHSA-2016:1547",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1325093"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "openSUSE-SU-2016:2275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
          },
          {
            "name": "RHSA-2016:1546",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
          },
          {
            "name": "85960",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85960"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2545"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "[oss-security] 20160408 CVE-2016-3945 libtiff: Out-of-bounds Write in the tiff2rgba tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/08/6"
        },
        {
          "name": "RHSA-2016:1547",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1325093"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "openSUSE-SU-2016:2275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
        },
        {
          "name": "RHSA-2016:1546",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
        },
        {
          "name": "85960",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85960"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2545"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3945",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "[oss-security] 20160408 CVE-2016-3945 libtiff: Out-of-bounds Write in the tiff2rgba tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/08/6"
            },
            {
              "name": "RHSA-2016:1547",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1325093",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1325093"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "openSUSE-SU-2016:2275",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html"
            },
            {
              "name": "RHSA-2016:1546",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
            },
            {
              "name": "85960",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85960"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2545",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2545"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3945",
    "datePublished": "2016-09-21T18:00:00",
    "dateReserved": "2016-04-01T00:00:00",
    "dateUpdated": "2024-08-06T00:10:31.904Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature