csaf_suse - suse-su-2017:2569-1

Vulnerability from csaf_suse

Published

2017-09-26 07:59

Modified

2017-09-26 07:59

Summary

Security update for tiff

Notes

Title of the patch

Security update for tiff

Description of the patch

This update for tiff to version 4.0.8 fixes a several bugs and security issues: These security issues were fixed: - CVE-2017-7595: The JPEGSetupEncode function allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image (bsc#1033127). - CVE-2016-10371: The TIFFWriteDirectoryTagCheckedRational function allowed remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file (bsc#1038438). - CVE-2017-7598: Error in tif_dirread.c allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image (bsc#1033118). - CVE-2017-7596: Undefined behavior because of floats outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033126). - CVE-2017-7597: Undefined behavior because of floats outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033120). - CVE-2017-7599: Undefined behavior because of shorts outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033113). - CVE-2017-7600: Undefined behavior because of chars outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033112). - CVE-2017-7601: Because of a shift exponent too large for 64-bit type long undefined behavior was caused, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033111). - CVE-2017-7602: Prevent signed integer overflow, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033109). - CVE-2017-7592: The putagreytile function had a left-shift undefined behavior issue, which might allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033131). - CVE-2017-7593: Ensure that tif_rawdata is properly initialized, to prevent remote attackers to obtain sensitive information from process memory via a crafted image (bsc#1033129). - CVE-2017-7594: The OJPEGReadHeaderInfoSecTablesDcTable function allowed remote attackers to cause a denial of service (memory leak) via a crafted image (bsc#1033128). - CVE-2017-9403: Prevent memory leak in function TIFFReadDirEntryLong8Array, which allowed attackers to cause a denial of service via a crafted file (bsc#1042805). - CVE-2017-9404: Fixed memory leak vulnerability in function OJPEGReadHeaderInfoSecTablesQTable, which allowed attackers to cause a denial of service via a crafted file (bsc#1042804). These various other issues were fixed: - Fix uint32 overflow in TIFFReadEncodedStrip() that caused an integer division by zero. Reported by Agostino Sarubbo. - fix heap-based buffer overflow on generation of PixarLog / LUV compressed files, with ColorMap, TransferFunction attached and nasty plays with bitspersample. The fix for LUV has not been tested, but suffers from the same kind of issue of PixarLog. - modify ChopUpSingleUncompressedStrip() to instanciate compute ntrips as TIFFhowmany_32(td->td_imagelength, rowsperstrip), instead of a logic based on the total size of data. Which is faulty is the total size of data is not sufficient to fill the whole image, and thus results in reading outside of the StripByCounts/StripOffsets arrays when using TIFFReadScanline() - make OJPEGDecode() early exit in case of failure in OJPEGPreDecode(). This will avoid a divide by zero, and potential other issues. - fix misleading indentation as warned by GCC. - revert change done on 2016-01-09 that made Param member of TIFFFaxTabEnt structure a uint16 to reduce size of the binary. It happens that the Hylafax software uses the tables that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable, TIFFFaxBlackTable), although they are not in a public libtiff header. - add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants of the functions without ext, with an extra argument to control the stop_on_error behaviour. - fix potential memory leaks in error code path of TIFFRGBAImageBegin(). - increase libjpeg max memory usable to 10 MB instead of libjpeg 1MB default. This helps when creating files with 'big' tile, without using libjpeg temporary files. - add _TIFFcalloc() - return 0 in Encode functions instead of -1 when TIFFFlushData1() fails. - only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling tag is not explicitly present. This helps a bit to reduce the I/O amount when the tag is present (especially on cloud hosted files). - in LZWPostEncode(), increase, if necessary, the code bit-width after flushing the remaining code and before emitting the EOI code. - fix memory leak in error code path of PixarLogSetupDecode(). - fix potential memory leak in OJPEGReadHeaderInfoSecTablesQTable, OJPEGReadHeaderInfoSecTablesDcTable and OJPEGReadHeaderInfoSecTablesAcTable - avoid crash in Fax3Close() on empty file. - TIFFFillStrip(): add limitation to the number of bytes read in case td_stripbytecount[strip] is bigger than reasonable, so as to avoid excessive memory allocation. - fix memory leak when the underlying codec (ZIP, PixarLog) succeeds its setupdecode() method, but PredictorSetup fails. - TIFFFillStrip() and TIFFFillTile(): avoid excessive memory allocation in case of shorten files. Only effective on 64 bit builds and non-mapped cases. - TIFFFillStripPartial() / TIFFSeek(), avoid potential integer overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode. - avoid excessive memory allocation in case of shorten files. Only effective on 64 bit builds. - update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with tif_rawdataloaded when calling TIFFStartStrip() or TIFFFillStripPartial(). - avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes - avoid potential int32 overflows in multiply_ms() and add_ms(). - fix out-of-buffer read in PackBitsDecode() Fixes - LogL16InitState(): avoid excessive memory allocation when RowsPerStrip tag is missing. - update dec_bitsleft at beginning of LZWDecode(), and update tif_rawcc at end of LZWDecode(). This is needed to properly work with the latest chnges in tif_read.c in CHUNKY_STRIP_READ_SUPPORT mode. - PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc with avail_in at beginning and end of function, similarly to what is done in LZWDecode(). Likely needed so that it works properly with latest chnges in tif_read.c in CHUNKY_STRIP_READ_SUPPORT mode. - initYCbCrConversion(): add basic validation of luma and refBlackWhite coefficients (just check they are not NaN for now), to avoid potential float to int overflows. - _TIFFVSetField(): fix outside range cast of double to float. - initYCbCrConversion(): check luma[1] is not zero to avoid division by zero - _TIFFVSetField(): fix outside range cast of double to float. - initYCbCrConversion(): check luma[1] is not zero to avoid division by zero. - initYCbCrConversion(): stricter validation for refBlackWhite coefficients values. - avoid uint32 underflow in cpDecodedStrips that can cause various issues, such as buffer overflows in the library. - fix readContigStripsIntoBuffer() in -i (ignore) mode so that the output buffer is correctly incremented to avoid write outside bounds. - add 3 extra bytes at end of strip buffer in readSeparateStripsIntoBuffer() to avoid read outside of heap allocated buffer. - fix integer division by zero when BitsPerSample is missing. - fix null pointer dereference in -r mode when the image has no StripByteCount tag. - avoid potential division by zero is BitsPerSamples tag is missing. - when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit the return number of inks to SamplesPerPixel, so that code that parses ink names doesn't go past the end of the buffer. - avoid potential division by zero is BitsPerSamples tag is missing. - fix uint32 underflow/overflow that can cause heap-based buffer overflow. - replace assert( (bps % 8) == 0 ) by a non assert check. - fix 2 heap-based buffer overflows (in PSDataBW and PSDataColorContig). - prevent heap-based buffer overflow in -j mode on a paletted image. - fix wrong usage of memcpy() that can trigger unspecified behaviour. - avoid potential invalid memory read in t2p_writeproc. - avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile(). - remove extraneous TIFFClose() in error code path, that caused double free. - error out cleanly in cpContig2SeparateByRow and cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap based overflow. - avoid integer division by zero. - call TIFFClose() in error code paths. - emit appropriate message if the input file is empty. - close TIFF handle in error code path.

Patchnames

SUSE-SLE-DESKTOP-12-SP2-2017-1589,SUSE-SLE-DESKTOP-12-SP3-2017-1589,SUSE-SLE-RPI-12-SP2-2017-1589,SUSE-SLE-SDK-12-SP2-2017-1589,SUSE-SLE-SDK-12-SP3-2017-1589,SUSE-SLE-SERVER-12-SP2-2017-1589,SUSE-SLE-SERVER-12-SP3-2017-1589

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for tiff",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for tiff to version 4.0.8 fixes a several bugs and security issues:\n\nThese security issues were fixed:\n\n- CVE-2017-7595: The JPEGSetupEncode function allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image (bsc#1033127).\n- CVE-2016-10371: The TIFFWriteDirectoryTagCheckedRational function allowed remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file (bsc#1038438).\n- CVE-2017-7598: Error in tif_dirread.c allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image (bsc#1033118).\n- CVE-2017-7596: Undefined behavior because of floats outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033126).\n- CVE-2017-7597: Undefined behavior because of floats outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033120).\n- CVE-2017-7599: Undefined behavior because of shorts outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033113).\n- CVE-2017-7600: Undefined behavior because of chars outside their expected value range, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033112).\n- CVE-2017-7601: Because of a shift exponent too large for 64-bit type long undefined behavior was caused, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033111).\n- CVE-2017-7602: Prevent signed integer overflow, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033109).\n- CVE-2017-7592: The putagreytile function had a left-shift undefined behavior issue, which might allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033131).\n- CVE-2017-7593: Ensure that tif_rawdata is properly initialized, to prevent remote attackers to obtain sensitive information from process memory via a crafted image (bsc#1033129).\n- CVE-2017-7594: The OJPEGReadHeaderInfoSecTablesDcTable function allowed remote attackers to cause a denial of service (memory leak) via a crafted image (bsc#1033128).\n- CVE-2017-9403: Prevent memory leak in function TIFFReadDirEntryLong8Array, which allowed attackers to cause a denial of service via a crafted file (bsc#1042805).\n- CVE-2017-9404: Fixed memory leak vulnerability in function OJPEGReadHeaderInfoSecTablesQTable, which allowed attackers to cause a denial of service via a crafted file (bsc#1042804).\n\nThese various other issues were fixed:\n\n- Fix uint32 overflow in TIFFReadEncodedStrip() that caused an\n  integer division by zero. Reported by Agostino Sarubbo.\n- fix heap-based buffer overflow on generation of PixarLog / LUV\n  compressed files, with ColorMap, TransferFunction attached and\n  nasty plays with bitspersample. The fix for LUV has not been\n  tested, but suffers from the same kind of issue of PixarLog.\n- modify ChopUpSingleUncompressedStrip() to instanciate compute\n  ntrips as TIFFhowmany_32(td->td_imagelength, rowsperstrip),\n  instead of a logic based on the total size of data. Which is\n  faulty is the total size of data is not sufficient to fill the\n  whole image, and thus results in reading outside of the\n  StripByCounts/StripOffsets arrays when using\n  TIFFReadScanline()\n- make OJPEGDecode() early exit in case of failure in\n  OJPEGPreDecode(). This will avoid a divide by zero, and\n  potential other issues.\n- fix misleading indentation as warned by GCC.\n- revert change done on 2016-01-09 that made Param member of\n  TIFFFaxTabEnt structure a uint16 to reduce size of the\n  binary. It happens that the Hylafax software uses the tables\n  that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,\n  TIFFFaxBlackTable), although they are not in a public libtiff\n  header.\n- add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants\n  of the functions without ext, with an extra argument to control\n  the stop_on_error behaviour.\n- fix potential memory leaks in error code path of\n  TIFFRGBAImageBegin().\n- increase libjpeg max memory usable to 10 MB instead of libjpeg\n  1MB default. This helps when creating files with 'big' tile,\n  without using libjpeg temporary files.\n- add _TIFFcalloc()\n- return 0 in Encode functions instead of -1 when\n  TIFFFlushData1() fails.\n- only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling\n  tag is not explicitly present. This helps a bit to reduce the\n  I/O amount when the tag is present (especially on cloud hosted\n  files).\n- in LZWPostEncode(), increase, if necessary, the code bit-width\n  after flushing the remaining code and before emitting the EOI\n  code.\n- fix memory leak in error code path of PixarLogSetupDecode().\n- fix potential memory leak in\n  OJPEGReadHeaderInfoSecTablesQTable,\n  OJPEGReadHeaderInfoSecTablesDcTable and\n  OJPEGReadHeaderInfoSecTablesAcTable\n- avoid crash in Fax3Close() on empty file.\n- TIFFFillStrip(): add limitation to the number of bytes read\n  in case td_stripbytecount[strip] is bigger than reasonable,\n  so as to avoid excessive memory allocation.\n- fix memory leak when the underlying codec (ZIP, PixarLog)\n  succeeds its setupdecode() method, but PredictorSetup fails.\n- TIFFFillStrip() and TIFFFillTile(): avoid excessive memory\n  allocation in case of shorten files. Only effective on 64 bit\n  builds and non-mapped cases.\n- TIFFFillStripPartial() / TIFFSeek(), avoid potential integer\n  overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.\n- avoid excessive memory allocation in case of shorten files.\n  Only effective on 64 bit builds.\n- update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with\n  tif_rawdataloaded when calling TIFFStartStrip() or\n  TIFFFillStripPartial(). \n- avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes\n- avoid potential int32 overflows in multiply_ms() and add_ms().\n- fix out-of-buffer read in PackBitsDecode() Fixes\n- LogL16InitState(): avoid excessive memory allocation when\n  RowsPerStrip tag is missing.\n- update dec_bitsleft at beginning of LZWDecode(), and update\n  tif_rawcc at end of LZWDecode(). This is needed to properly\n  work with the latest chnges in tif_read.c in\n  CHUNKY_STRIP_READ_SUPPORT mode.\n- PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc\n  with avail_in at beginning and end of function, similarly to\n  what is done in LZWDecode(). Likely needed so that it works\n  properly with latest chnges in tif_read.c in\n  CHUNKY_STRIP_READ_SUPPORT mode.\n- initYCbCrConversion(): add basic validation of luma and\n  refBlackWhite coefficients (just check they are not NaN for\n  now), to avoid potential float to int overflows.\n- _TIFFVSetField(): fix outside range cast of double to float.\n- initYCbCrConversion(): check luma[1] is not zero to avoid division by zero\n- _TIFFVSetField(): fix outside range cast of double to float.\n- initYCbCrConversion(): check luma[1] is not zero to avoid\n  division by zero.\n- initYCbCrConversion(): stricter validation for refBlackWhite\n  coefficients values.\n- avoid uint32 underflow in cpDecodedStrips that can cause\n  various issues, such as buffer overflows in the library.\n- fix readContigStripsIntoBuffer() in -i (ignore) mode so that\n  the output buffer is correctly incremented to avoid write\n  outside bounds.\n- add 3 extra bytes at end of strip buffer in\n  readSeparateStripsIntoBuffer() to avoid read outside of heap\n  allocated buffer.\n- fix integer division by zero when BitsPerSample is missing.\n- fix null pointer dereference in -r mode when the image has no\n  StripByteCount tag.\n- avoid potential division by zero is BitsPerSamples tag is\n  missing.\n- when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit\n  the return number of inks to SamplesPerPixel, so that code\n  that parses ink names doesn't go past the end of the buffer.\n- avoid potential division by zero is BitsPerSamples tag is\n  missing.\n- fix uint32 underflow/overflow that can cause heap-based buffer\n  overflow.\n- replace assert( (bps % 8) == 0 ) by a non assert check.\n- fix 2 heap-based buffer overflows (in PSDataBW and\n  PSDataColorContig).\n- prevent heap-based buffer overflow in -j mode on a paletted\n  image.\n- fix wrong usage of memcpy() that can trigger unspecified behaviour.\n- avoid potential invalid memory read in t2p_writeproc.\n- avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().\n- remove extraneous TIFFClose() in error code path, that caused\n  double free.\n- error out cleanly in cpContig2SeparateByRow and\n  cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap\n  based overflow.\n- avoid integer division by zero.\n- call TIFFClose() in error code paths.\n- emit appropriate message if the input file is empty.\n- close TIFF handle in error code path.\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-SP2-2017-1589,SUSE-SLE-DESKTOP-12-SP3-2017-1589,SUSE-SLE-RPI-12-SP2-2017-1589,SUSE-SLE-SDK-12-SP2-2017-1589,SUSE-SLE-SDK-12-SP3-2017-1589,SUSE-SLE-SERVER-12-SP2-2017-1589,SUSE-SLE-SERVER-12-SP3-2017-1589",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_2569-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2017:2569-1",
            url: "https://www.suse.com/support/update/announcement/2017/suse-su-20172569-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2017:2569-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033109",
            url: "https://bugzilla.suse.com/1033109",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033111",
            url: "https://bugzilla.suse.com/1033111",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033112",
            url: "https://bugzilla.suse.com/1033112",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033113",
            url: "https://bugzilla.suse.com/1033113",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033118",
            url: "https://bugzilla.suse.com/1033118",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033120",
            url: "https://bugzilla.suse.com/1033120",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033126",
            url: "https://bugzilla.suse.com/1033126",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033127",
            url: "https://bugzilla.suse.com/1033127",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033128",
            url: "https://bugzilla.suse.com/1033128",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033129",
            url: "https://bugzilla.suse.com/1033129",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033131",
            url: "https://bugzilla.suse.com/1033131",
         },
         {
            category: "self",
            summary: "SUSE Bug 1038438",
            url: "https://bugzilla.suse.com/1038438",
         },
         {
            category: "self",
            summary: "SUSE Bug 1042804",
            url: "https://bugzilla.suse.com/1042804",
         },
         {
            category: "self",
            summary: "SUSE Bug 1042805",
            url: "https://bugzilla.suse.com/1042805",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10371 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10371/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7592 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7592/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7593 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7593/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7594 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7594/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7595 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7595/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7596 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7596/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7597 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7597/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7598 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7598/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7599 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7599/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7600 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7600/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7601 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7601/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7602 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7602/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-9403 page",
            url: "https://www.suse.com/security/cve/CVE-2017-9403/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-9404 page",
            url: "https://www.suse.com/security/cve/CVE-2017-9404/",
         },
      ],
      title: "Security update for tiff",
      tracking: {
         current_release_date: "2017-09-26T07:59:13Z",
         generator: {
            date: "2017-09-26T07:59:13Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2017:2569-1",
         initial_release_date: "2017-09-26T07:59:13Z",
         revision_history: [
            {
               date: "2017-09-26T07:59:13Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.8-44.3.1.aarch64",
                        product: {
                           name: "libtiff5-4.0.8-44.3.1.aarch64",
                           product_id: "libtiff5-4.0.8-44.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.8-44.3.1.aarch64",
                        product: {
                           name: "tiff-4.0.8-44.3.1.aarch64",
                           product_id: "tiff-4.0.8-44.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.8-44.3.1.aarch64",
                        product: {
                           name: "libtiff-devel-4.0.8-44.3.1.aarch64",
                           product_id: "libtiff-devel-4.0.8-44.3.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.8-44.3.1.ppc64le",
                        product: {
                           name: "libtiff-devel-4.0.8-44.3.1.ppc64le",
                           product_id: "libtiff-devel-4.0.8-44.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.8-44.3.1.ppc64le",
                        product: {
                           name: "libtiff5-4.0.8-44.3.1.ppc64le",
                           product_id: "libtiff5-4.0.8-44.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.8-44.3.1.ppc64le",
                        product: {
                           name: "tiff-4.0.8-44.3.1.ppc64le",
                           product_id: "tiff-4.0.8-44.3.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.8-44.3.1.s390x",
                        product: {
                           name: "libtiff-devel-4.0.8-44.3.1.s390x",
                           product_id: "libtiff-devel-4.0.8-44.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.8-44.3.1.s390x",
                        product: {
                           name: "libtiff5-4.0.8-44.3.1.s390x",
                           product_id: "libtiff5-4.0.8-44.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-32bit-4.0.8-44.3.1.s390x",
                        product: {
                           name: "libtiff5-32bit-4.0.8-44.3.1.s390x",
                           product_id: "libtiff5-32bit-4.0.8-44.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.8-44.3.1.s390x",
                        product: {
                           name: "tiff-4.0.8-44.3.1.s390x",
                           product_id: "tiff-4.0.8-44.3.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.8-44.3.1.x86_64",
                        product: {
                           name: "libtiff5-4.0.8-44.3.1.x86_64",
                           product_id: "libtiff5-4.0.8-44.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
                        product: {
                           name: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
                           product_id: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.8-44.3.1.x86_64",
                        product: {
                           name: "libtiff-devel-4.0.8-44.3.1.x86_64",
                           product_id: "libtiff-devel-4.0.8-44.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.8-44.3.1.x86_64",
                        product: {
                           name: "tiff-4.0.8-44.3.1.x86_64",
                           product_id: "tiff-4.0.8-44.3.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP3",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP3",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2",
                           product_id: "SUSE Linux Enterprise Server 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3",
                           product_id: "SUSE Linux Enterprise Server 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp3",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
               product_id: "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
               product_id: "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
            },
            product_reference: "tiff-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff-devel-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
            },
            product_reference: "tiff-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "tiff-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
            },
            product_reference: "tiff-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
            },
            product_reference: "tiff-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
            },
            product_reference: "tiff-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "tiff-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
            },
            product_reference: "tiff-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
            },
            product_reference: "tiff-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
            },
            product_reference: "tiff-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "tiff-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
            },
            product_reference: "tiff-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
            },
            product_reference: "tiff-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
            },
            product_reference: "tiff-4.0.8-44.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
            },
            product_reference: "tiff-4.0.8-44.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
            },
            product_reference: "tiff-4.0.8-44.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.8-44.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
            },
            product_reference: "tiff-4.0.8-44.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-10371",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10371",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10371",
               url: "https://www.suse.com/security/cve/CVE-2016-10371",
            },
            {
               category: "external",
               summary: "SUSE Bug 1038438 for CVE-2016-10371",
               url: "https://bugzilla.suse.com/1038438",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "low",
            },
         ],
         title: "CVE-2016-10371",
      },
      {
         cve: "CVE-2017-7592",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7592",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7592",
               url: "https://www.suse.com/security/cve/CVE-2017-7592",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033131 for CVE-2017-7592",
               url: "https://bugzilla.suse.com/1033131",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7592",
      },
      {
         cve: "CVE-2017-7593",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7593",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7593",
               url: "https://www.suse.com/security/cve/CVE-2017-7593",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033129 for CVE-2017-7593",
               url: "https://bugzilla.suse.com/1033129",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7593",
      },
      {
         cve: "CVE-2017-7594",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7594",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7594",
               url: "https://www.suse.com/security/cve/CVE-2017-7594",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033128 for CVE-2017-7594",
               url: "https://bugzilla.suse.com/1033128",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7594",
      },
      {
         cve: "CVE-2017-7595",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7595",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7595",
               url: "https://www.suse.com/security/cve/CVE-2017-7595",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033111 for CVE-2017-7595",
               url: "https://bugzilla.suse.com/1033111",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033127 for CVE-2017-7595",
               url: "https://bugzilla.suse.com/1033127",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7595",
      },
      {
         cve: "CVE-2017-7596",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7596",
            },
         ],
         notes: [
            {
               category: "general",
               text: "LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7596",
               url: "https://www.suse.com/security/cve/CVE-2017-7596",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033112 for CVE-2017-7596",
               url: "https://bugzilla.suse.com/1033112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033113 for CVE-2017-7596",
               url: "https://bugzilla.suse.com/1033113",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033120 for CVE-2017-7596",
               url: "https://bugzilla.suse.com/1033120",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033126 for CVE-2017-7596",
               url: "https://bugzilla.suse.com/1033126",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7596",
      },
      {
         cve: "CVE-2017-7597",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7597",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tif_dirread.c in LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7597",
               url: "https://www.suse.com/security/cve/CVE-2017-7597",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033112 for CVE-2017-7597",
               url: "https://bugzilla.suse.com/1033112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033113 for CVE-2017-7597",
               url: "https://bugzilla.suse.com/1033113",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033120 for CVE-2017-7597",
               url: "https://bugzilla.suse.com/1033120",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033126 for CVE-2017-7597",
               url: "https://bugzilla.suse.com/1033126",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7597",
      },
      {
         cve: "CVE-2017-7598",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7598",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7598",
               url: "https://www.suse.com/security/cve/CVE-2017-7598",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033118 for CVE-2017-7598",
               url: "https://bugzilla.suse.com/1033118",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7598",
      },
      {
         cve: "CVE-2017-7599",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7599",
            },
         ],
         notes: [
            {
               category: "general",
               text: "LibTIFF 4.0.7 has an \"outside the range of representable values of type short\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7599",
               url: "https://www.suse.com/security/cve/CVE-2017-7599",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033112 for CVE-2017-7599",
               url: "https://bugzilla.suse.com/1033112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033113 for CVE-2017-7599",
               url: "https://bugzilla.suse.com/1033113",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033120 for CVE-2017-7599",
               url: "https://bugzilla.suse.com/1033120",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033126 for CVE-2017-7599",
               url: "https://bugzilla.suse.com/1033126",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7599",
      },
      {
         cve: "CVE-2017-7600",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7600",
            },
         ],
         notes: [
            {
               category: "general",
               text: "LibTIFF 4.0.7 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7600",
               url: "https://www.suse.com/security/cve/CVE-2017-7600",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033112 for CVE-2017-7600",
               url: "https://bugzilla.suse.com/1033112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033113 for CVE-2017-7600",
               url: "https://bugzilla.suse.com/1033113",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033120 for CVE-2017-7600",
               url: "https://bugzilla.suse.com/1033120",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033126 for CVE-2017-7600",
               url: "https://bugzilla.suse.com/1033126",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "low",
            },
         ],
         title: "CVE-2017-7600",
      },
      {
         cve: "CVE-2017-7601",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7601",
            },
         ],
         notes: [
            {
               category: "general",
               text: "LibTIFF 4.0.7 has a \"shift exponent too large for 64-bit type long\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7601",
               url: "https://www.suse.com/security/cve/CVE-2017-7601",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033111 for CVE-2017-7601",
               url: "https://bugzilla.suse.com/1033111",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033127 for CVE-2017-7601",
               url: "https://bugzilla.suse.com/1033127",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "low",
            },
         ],
         title: "CVE-2017-7601",
      },
      {
         cve: "CVE-2017-7602",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7602",
            },
         ],
         notes: [
            {
               category: "general",
               text: "LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7602",
               url: "https://www.suse.com/security/cve/CVE-2017-7602",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033109 for CVE-2017-7602",
               url: "https://bugzilla.suse.com/1033109",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-7602",
      },
      {
         cve: "CVE-2017-9403",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-9403",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-9403",
               url: "https://www.suse.com/security/cve/CVE-2017-9403",
            },
            {
               category: "external",
               summary: "SUSE Bug 1042805 for CVE-2017-9403",
               url: "https://bugzilla.suse.com/1042805",
            },
            {
               category: "external",
               summary: "SUSE Bug 1045688 for CVE-2017-9403",
               url: "https://bugzilla.suse.com/1045688",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "low",
            },
         ],
         title: "CVE-2017-9403",
      },
      {
         cve: "CVE-2017-9404",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-9404",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-9404",
               url: "https://www.suse.com/security/cve/CVE-2017-9404",
            },
            {
               category: "external",
               summary: "SUSE Bug 1042804 for CVE-2017-9404",
               url: "https://bugzilla.suse.com/1042804",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel-4.0.8-44.3.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.8-44.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-09-26T07:59:13Z",
               details: "low",
            },
         ],
         title: "CVE-2017-9404",
      },
   ],
}

cve-2017-7593

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97502	vdb-entry, x_refsource_BID
	http://bugzilla.maptools.org/show_bug.cgi?id=2651	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:11.941Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97502",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97502",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2651",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97502",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97502",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2651",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7593",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97502",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97502",
                  },
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2651",
                     refsource: "MISC",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2651",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7593",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:11.941Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7594

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	http://bugzilla.maptools.org/show_bug.cgi?id=2659	x_refsource_MISC
	http://www.securityfocus.com/bid/97503	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:11.976Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2659",
               },
               {
                  name: "97503",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97503",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2659",
            },
            {
               name: "97503",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97503",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7594",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2659",
                     refsource: "MISC",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2659",
                  },
                  {
                     name: "97503",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97503",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7594",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:11.976Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7596

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97506	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.010Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97506",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97506",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97506",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97506",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7596",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97506",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97506",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7596",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.010Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7600

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:11.876Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "LibTIFF 4.0.7 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7600",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "LibTIFF 4.0.7 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7600",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:11.876Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7598

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97499	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.046Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97499",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97499",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97499",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97499",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7598",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97499",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97499",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7598",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.046Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7601

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/97511	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.089Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "97511",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97511",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "LibTIFF 4.0.7 has a \"shift exponent too large for 64-bit type long\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "97511",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97511",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7601",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "LibTIFF 4.0.7 has a \"shift exponent too large for 64-bit type long\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "97511",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97511",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7601",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.089Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-9404

Vulnerability from cvelistv5

Published

2017-06-02 19:00

Modified

2024-08-05 17:02

Severity ?

Summary

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.

References

▼	URL	Tags
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://bugzilla.maptools.org/show_bug.cgi?id=2688	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3903	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T17:02:44.358Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2688",
               },
               {
                  name: "DSA-3903",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3903",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-06-02T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2688",
            },
            {
               name: "DSA-3903",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3903",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-9404",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2688",
                     refsource: "CONFIRM",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2688",
                  },
                  {
                     name: "DSA-3903",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3903",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-9404",
      datePublished: "2017-06-02T19:00:00",
      dateReserved: "2017-06-02T00:00:00",
      dateUpdated: "2024-08-05T17:02:44.358Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7602

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.securityfocus.com/bid/97500	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.014Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "97500",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97500",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "97500",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97500",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7602",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "97500",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97500",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7602",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.014Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-9403

Vulnerability from cvelistv5

Published

2017-06-02 19:00

Modified

2024-08-05 17:02

Severity ?

Summary

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://bugzilla.maptools.org/show_bug.cgi?id=2689	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3903	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T17:02:44.407Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2689",
               },
               {
                  name: "DSA-3903",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3903",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-06-02T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2689",
            },
            {
               name: "DSA-3903",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3903",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-9403",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2689",
                     refsource: "CONFIRM",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2689",
                  },
                  {
                     name: "DSA-3903",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3903",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-9403",
      datePublished: "2017-06-02T19:00:00",
      dateReserved: "2017-06-02T00:00:00",
      dateUpdated: "2024-08-05T17:02:44.407Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7597

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97504	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.032Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97504",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97504",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tif_dirread.c in LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97504",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97504",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7597",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tif_dirread.c in LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97504",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97504",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7597",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.032Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7595

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c	x_refsource_MISC
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97501	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:11.964Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97501",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97501",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97501",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97501",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7595",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97501",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97501",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7595",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:11.964Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-10371

Vulnerability from cvelistv5

Published

2017-05-10 05:14

Modified

2024-08-06 03:21

Severity ?

Summary

The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.

References

▼	URL	Tags
	http://bugzilla.maptools.org/show_bug.cgi?id=2612	x_refsource_CONFIRM
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://bugzilla.maptools.org/show_bug.cgi?id=2535	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:21:51.440Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2612",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2535",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-05-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2612",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2535",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-10371",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2612",
                     refsource: "CONFIRM",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2612",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2535",
                     refsource: "CONFIRM",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2535",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-10371",
      datePublished: "2017-05-10T05:14:00",
      dateReserved: "2017-05-09T00:00:00",
      dateUpdated: "2024-08-06T03:21:51.440Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7599

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97505	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/bid/97508	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.014Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
               },
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97505",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97505",
               },
               {
                  name: "97508",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97508",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "LibTIFF 4.0.7 has an \"outside the range of representable values of type short\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
            },
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97505",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97505",
            },
            {
               name: "97508",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97508",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7599",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "LibTIFF 4.0.7 has an \"outside the range of representable values of type short\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                     refsource: "MISC",
                     url: "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
                  },
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97505",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97505",
                  },
                  {
                     name: "97508",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97508",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7599",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.014Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7592

Vulnerability from cvelistv5

Published

2017-04-09 14:00

Modified

2024-08-05 16:04

Severity ?

Summary

The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	http://bugzilla.maptools.org/show_bug.cgi?id=2658	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/97510	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:11.971Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "DSA-3844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3844",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2658",
               },
               {
                  name: "GLSA-201709-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-27",
               },
               {
                  name: "USN-3602-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3602-1/",
               },
               {
                  name: "97510",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97510",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-03-21T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "DSA-3844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3844",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2658",
            },
            {
               name: "GLSA-201709-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-27",
            },
            {
               name: "USN-3602-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3602-1/",
            },
            {
               name: "97510",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97510",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7592",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "DSA-3844",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3844",
                  },
                  {
                     name: "http://bugzilla.maptools.org/show_bug.cgi?id=2658",
                     refsource: "MISC",
                     url: "http://bugzilla.maptools.org/show_bug.cgi?id=2658",
                  },
                  {
                     name: "GLSA-201709-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-27",
                  },
                  {
                     name: "USN-3602-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3602-1/",
                  },
                  {
                     name: "97510",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97510",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7592",
      datePublished: "2017-04-09T14:00:00",
      dateReserved: "2017-04-09T00:00:00",
      dateUpdated: "2024-08-05T16:04:11.971Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature