csaf_suse - suse-su-2018:3879-1

Vulnerability from csaf_suse

Published

2018-11-23 16:06

Modified

2018-11-23 16:06

Summary

Security update for tiff

Notes

Title of the patch

Security update for tiff

Description of the patch

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672). - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257). - CVE-2017-9147: Fixed invalid read in the _TIFFVGetField function in tif_dir.c, that allowed remote attackers to cause a DoS via acrafted TIFF file (bsc#1040322). - CVE-2017-9117: Fixed BMP images processing that was verified without biWidth and biHeight values (bsc#1040080). - CVE-2017-17942: Fixed issue in the function PackBitsEncode that could have led to a heap overflow and caused a DoS (bsc#1074186). - CVE-2016-9273: Fixed heap-based buffer overflow issue (bsc#1010163). - CVE-2016-5319: Fixed heap-based buffer overflow in PackBitsEncode (bsc#983440). - CVE-2016-3621: Fixed out-of-bounds read in the bmp2tiff tool (lzw packing) (bsc#974448). - CVE-2016-3620: Fixed out-of-bounds read in the bmp2tiff tool (zip packing) (bsc#974447) - CVE-2016-3619: Fixed out-of-bounds read in the bmp2tiff tool (none packing) (bsc#974446) - CVE-2015-8870: Fixed integer overflow in tools/bmp2tiff.c that allowed remote attackers to causea DOS (bsc#1014461). Non-security issues fixed: - asan_build: build ASAN included - debug_build: build more suitable for debugging

Patchnames

sdksp4-tiff-13878,slessp4-tiff-13878

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for tiff",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for tiff fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).\n- CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).\n- CVE-2017-9147: Fixed invalid read in the _TIFFVGetField function in tif_dir.c, that allowed remote attackers to cause a DoS via acrafted TIFF file (bsc#1040322). \n- CVE-2017-9117: Fixed BMP images processing that was verified without biWidth and biHeight values (bsc#1040080).\n- CVE-2017-17942: Fixed issue in the function PackBitsEncode that could have led to a heap overflow and caused a DoS (bsc#1074186).\n- CVE-2016-9273: Fixed heap-based buffer overflow issue (bsc#1010163).\n- CVE-2016-5319: Fixed heap-based buffer overflow in PackBitsEncode (bsc#983440).\n- CVE-2016-3621: Fixed out-of-bounds read in the bmp2tiff tool (lzw packing) (bsc#974448).\n- CVE-2016-3620: Fixed out-of-bounds read in the bmp2tiff tool (zip packing) (bsc#974447)\n- CVE-2016-3619: Fixed out-of-bounds read in the bmp2tiff tool (none packing) (bsc#974446)\n- CVE-2015-8870: Fixed integer overflow in tools/bmp2tiff.c that allowed remote attackers to causea DOS (bsc#1014461).\n\nNon-security issues fixed:\n\n- asan_build: build ASAN included\n- debug_build: build more suitable for debugging\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-tiff-13878,slessp4-tiff-13878",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3879-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:3879-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183879-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:3879-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-November/004880.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1010163",
        "url": "https://bugzilla.suse.com/1010163"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014461",
        "url": "https://bugzilla.suse.com/1014461"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1040080",
        "url": "https://bugzilla.suse.com/1040080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1040322",
        "url": "https://bugzilla.suse.com/1040322"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1074186",
        "url": "https://bugzilla.suse.com/1074186"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1099257",
        "url": "https://bugzilla.suse.com/1099257"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113672",
        "url": "https://bugzilla.suse.com/1113672"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974446",
        "url": "https://bugzilla.suse.com/974446"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974447",
        "url": "https://bugzilla.suse.com/974447"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974448",
        "url": "https://bugzilla.suse.com/974448"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 983440",
        "url": "https://bugzilla.suse.com/983440"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8870 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8870/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3619 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3619/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3620 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3620/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3621 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3621/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5319 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9273 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17942 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17942/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9117 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9117/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9147 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9147/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12900 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12900/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18661 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18661/"
      }
    ],
    "title": "Security update for tiff",
    "tracking": {
      "current_release_date": "2018-11-23T16:06:18Z",
      "generator": {
        "date": "2018-11-23T16:06:18Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:3879-1",
      "initial_release_date": "2018-11-23T16:06:18Z",
      "revision_history": [
        {
          "date": "2018-11-23T16:06:18Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.22.1.i586",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.22.1.i586",
                  "product_id": "libtiff-devel-3.8.2-141.169.22.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.22.1.i586",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.22.1.i586",
                  "product_id": "libtiff3-3.8.2-141.169.22.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.22.1.i586",
                "product": {
                  "name": "tiff-3.8.2-141.169.22.1.i586",
                  "product_id": "tiff-3.8.2-141.169.22.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.22.1.ia64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.22.1.ia64",
                  "product_id": "libtiff-devel-3.8.2-141.169.22.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.22.1.ia64",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.22.1.ia64",
                  "product_id": "libtiff3-3.8.2-141.169.22.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-x86-3.8.2-141.169.22.1.ia64",
                "product": {
                  "name": "libtiff3-x86-3.8.2-141.169.22.1.ia64",
                  "product_id": "libtiff3-x86-3.8.2-141.169.22.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.22.1.ia64",
                "product": {
                  "name": "tiff-3.8.2-141.169.22.1.ia64",
                  "product_id": "tiff-3.8.2-141.169.22.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.22.1.ppc64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.22.1.ppc64",
                  "product_id": "libtiff-devel-3.8.2-141.169.22.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.22.1.ppc64",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.22.1.ppc64",
                  "product_id": "libtiff3-3.8.2-141.169.22.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
                  "product_id": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.22.1.ppc64",
                "product": {
                  "name": "tiff-3.8.2-141.169.22.1.ppc64",
                  "product_id": "tiff-3.8.2-141.169.22.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.22.1.s390x",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.22.1.s390x",
                  "product_id": "libtiff-devel-3.8.2-141.169.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.169.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.22.1.s390x",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.22.1.s390x",
                  "product_id": "libtiff3-3.8.2-141.169.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.169.22.1.s390x",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.169.22.1.s390x",
                  "product_id": "libtiff3-32bit-3.8.2-141.169.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.22.1.s390x",
                "product": {
                  "name": "tiff-3.8.2-141.169.22.1.s390x",
                  "product_id": "tiff-3.8.2-141.169.22.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.22.1.x86_64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.22.1.x86_64",
                  "product_id": "libtiff-devel-3.8.2-141.169.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.22.1.x86_64",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.22.1.x86_64",
                  "product_id": "libtiff3-3.8.2-141.169.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
                  "product_id": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.22.1.x86_64",
                "product": {
                  "name": "tiff-3.8.2-141.169.22.1.x86_64",
                  "product_id": "tiff-3.8.2-141.169.22.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.22.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.22.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-x86-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "libtiff3-x86-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-x86-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "libtiff3-x86-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64"
        },
        "product_reference": "tiff-3.8.2-141.169.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8870",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8870"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8870",
          "url": "https://www.suse.com/security/cve/CVE-2015-8870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014461 for CVE-2015-8870",
          "url": "https://bugzilla.suse.com/1014461"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2015-8870",
          "url": "https://bugzilla.suse.com/1150480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8870"
    },
    {
      "cve": "CVE-2016-3619",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3619"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c none\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3619",
          "url": "https://www.suse.com/security/cve/CVE-2016-3619"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040080 for CVE-2016-3619",
          "url": "https://bugzilla.suse.com/1040080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2016-3619",
          "url": "https://bugzilla.suse.com/1150480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974446 for CVE-2016-3619",
          "url": "https://bugzilla.suse.com/974446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974447 for CVE-2016-3619",
          "url": "https://bugzilla.suse.com/974447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974448 for CVE-2016-3619",
          "url": "https://bugzilla.suse.com/974448"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3619"
    },
    {
      "cve": "CVE-2016-3620",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3620"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c zip\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3620",
          "url": "https://www.suse.com/security/cve/CVE-2016-3620"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040080 for CVE-2016-3620",
          "url": "https://bugzilla.suse.com/1040080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2016-3620",
          "url": "https://bugzilla.suse.com/1150480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974447 for CVE-2016-3620",
          "url": "https://bugzilla.suse.com/974447"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3620"
    },
    {
      "cve": "CVE-2016-3621",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3621"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c lzw\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3621",
          "url": "https://www.suse.com/security/cve/CVE-2016-3621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040080 for CVE-2016-3621",
          "url": "https://bugzilla.suse.com/1040080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2016-3621",
          "url": "https://bugzilla.suse.com/1150480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974448 for CVE-2016-3621",
          "url": "https://bugzilla.suse.com/974448"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3621"
    },
    {
      "cve": "CVE-2016-5319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5319",
          "url": "https://www.suse.com/security/cve/CVE-2016-5319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074186 for CVE-2016-5319",
          "url": "https://bugzilla.suse.com/1074186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2016-5319",
          "url": "https://bugzilla.suse.com/1150480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983440 for CVE-2016-5319",
          "url": "https://bugzilla.suse.com/983440"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5319"
    },
    {
      "cve": "CVE-2016-9273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9273",
          "url": "https://www.suse.com/security/cve/CVE-2016-9273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010163 for CVE-2016-9273",
          "url": "https://bugzilla.suse.com/1010163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017693 for CVE-2016-9273",
          "url": "https://bugzilla.suse.com/1017693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2016-9273",
          "url": "https://bugzilla.suse.com/1150480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9273"
    },
    {
      "cve": "CVE-2017-17942",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17942"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17942",
          "url": "https://www.suse.com/security/cve/CVE-2017-17942"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074186 for CVE-2017-17942",
          "url": "https://bugzilla.suse.com/1074186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2017-17942",
          "url": "https://bugzilla.suse.com/1150480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983440 for CVE-2017-17942",
          "url": "https://bugzilla.suse.com/983440"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-17942"
    },
    {
      "cve": "CVE-2017-9117",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9117"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9117",
          "url": "https://www.suse.com/security/cve/CVE-2017-9117"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040080 for CVE-2017-9117",
          "url": "https://bugzilla.suse.com/1040080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2017-9117",
          "url": "https://bugzilla.suse.com/1150480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9117"
    },
    {
      "cve": "CVE-2017-9147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9147",
          "url": "https://www.suse.com/security/cve/CVE-2017-9147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040322 for CVE-2017-9147",
          "url": "https://bugzilla.suse.com/1040322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2017-9147",
          "url": "https://bugzilla.suse.com/1150480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9147"
    },
    {
      "cve": "CVE-2018-12900",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12900"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12900",
          "url": "https://www.suse.com/security/cve/CVE-2018-12900"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1099257 for CVE-2018-12900",
          "url": "https://bugzilla.suse.com/1099257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125113 for CVE-2018-12900",
          "url": "https://bugzilla.suse.com/1125113"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150480 for CVE-2018-12900",
          "url": "https://bugzilla.suse.com/1150480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-12900"
    },
    {
      "cve": "CVE-2018-18661",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18661"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18661",
          "url": "https://www.suse.com/security/cve/CVE-2018-18661"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1113672 for CVE-2018-18661",
          "url": "https://bugzilla.suse.com/1113672"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.22.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-23T16:06:18Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-18661"
    }
  ]
}

cve-2016-3619

Vulnerability from cvelistv5

Published

2016-10-03 16:00

Modified

2024-08-06 00:03

Severity ?

Summary

The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1035508	vdb-entry, x_refsource_SECTRACK
	http://www.openwall.com/lists/oss-security/2016/04/07/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://bugzilla.maptools.org/show_bug.cgi?id=2567	x_refsource_MISC
	http://www.securityfocus.com/bid/85919	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.265Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1035508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035508"
          },
          {
            "name": "[oss-security] 20160407 CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/07/1"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2567"
          },
          {
            "name": "85919",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85919"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c none\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-02T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1035508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035508"
        },
        {
          "name": "[oss-security] 20160407 CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/07/1"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2567"
        },
        {
          "name": "85919",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85919"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3619",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c none\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1035508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035508"
            },
            {
              "name": "[oss-security] 20160407 CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/07/1"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2567",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2567"
            },
            {
              "name": "85919",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85919"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3619",
    "datePublished": "2016-10-03T16:00:00",
    "dateReserved": "2016-03-21T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-9117

Vulnerability from cvelistv5

Published

2017-05-21 19:00

Modified

2025-01-07 23:52

Severity ?

4.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).

References

▼	URL	Tags
	https://usn.ubuntu.com/3606-1/	vendor-advisory
	http://www.securityfocus.com/bid/98581	vdb-entry
	http://bugzilla.maptools.org/show_bug.cgi?id=2690
	https://gitlab.com/libtiff/libtiff/-/issues/89

Impacted products

	Vendor	Product	Version
	LibTIFF	LibTIFF	Version: 4.0.6 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:55:22.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3606-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3606-1/"
          },
          {
            "name": "98581",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98581"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2690"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "LibTIFF",
          "vendor": "LibTIFF",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "4.0.6",
                  "versionStartIncluding": "4.0.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2017-05-21T04:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-07T23:52:45.377384Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3606-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/3606-1/"
        },
        {
          "name": "98581",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/98581"
        },
        {
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2690"
        },
        {
          "url": "https://gitlab.com/libtiff/libtiff/-/issues/89"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9117",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3606-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3606-1/"
            },
            {
              "name": "98581",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98581"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2690",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2690"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9117",
    "datePublished": "2017-05-21T19:00:00",
    "dateReserved": "2017-05-21T00:00:00",
    "dateUpdated": "2025-01-07T23:52:45.377384Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-9273

Vulnerability from cvelistv5

Published

2017-01-18 17:00

Modified

2024-08-06 02:42

Severity ?

Summary

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2016/11/09/20	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/11/11/6	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/94271	vdb-entry, x_refsource_BID
	http://bugzilla.maptools.org/show_bug.cgi?id=2587	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:42:11.262Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20161109 CVE Request: libtiff: heap buffer overflow/read outside of array",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/09/20"
          },
          {
            "name": "[oss-security] 20161111 Re: CVE Request: libtiff: heap buffer overflow/read outside of array",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/11/6"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "94271",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94271"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2587"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20161109 CVE Request: libtiff: heap buffer overflow/read outside of array",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/09/20"
        },
        {
          "name": "[oss-security] 20161111 Re: CVE Request: libtiff: heap buffer overflow/read outside of array",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/11/6"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "94271",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94271"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2587"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20161109 CVE Request: libtiff: heap buffer overflow/read outside of array",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/11/09/20"
            },
            {
              "name": "[oss-security] 20161111 Re: CVE Request: libtiff: heap buffer overflow/read outside of array",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/11/11/6"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "94271",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94271"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2587",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2587"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9273",
    "datePublished": "2017-01-18T17:00:00",
    "dateReserved": "2016-11-11T00:00:00",
    "dateUpdated": "2024-08-06T02:42:11.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-5319

Vulnerability from cvelistv5

Published

2017-01-20 15:00

Modified

2024-08-06 01:00

Severity ?

Summary

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/88604	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/04/27/6	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/06/07/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:59.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "88604",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/88604"
          },
          {
            "name": "[oss-security] 20160427 3 bugs refer to buffer overflow in in libtiff 4.0.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/27/6"
          },
          {
            "name": "[oss-security] 20160606 3 bugs refer to buffer overflow in in libtiff 4.0.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/07/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "88604",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/88604"
        },
        {
          "name": "[oss-security] 20160427 3 bugs refer to buffer overflow in in libtiff 4.0.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/27/6"
        },
        {
          "name": "[oss-security] 20160606 3 bugs refer to buffer overflow in in libtiff 4.0.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/07/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5319",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "88604",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/88604"
            },
            {
              "name": "[oss-security] 20160427 3 bugs refer to buffer overflow in in libtiff 4.0.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/27/6"
            },
            {
              "name": "[oss-security] 20160606 3 bugs refer to buffer overflow in in libtiff 4.0.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/07/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5319",
    "datePublished": "2017-01-20T15:00:00",
    "dateReserved": "2016-06-06T00:00:00",
    "dateUpdated": "2024-08-06T01:00:59.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3621

Vulnerability from cvelistv5

Published

2016-10-03 16:00

Modified

2024-08-06 00:03

Severity ?

Summary

The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1035508	vdb-entry, x_refsource_SECTRACK
	http://www.openwall.com/lists/oss-security/2016/04/07/3	mailing-list, x_refsource_MLIST
	http://bugzilla.maptools.org/show_bug.cgi?id=2565	x_refsource_MISC
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1035508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035508"
          },
          {
            "name": "[oss-security] 20160407 CVE-2016-3621 libtiff: Out-of-bounds Read in the bmp2tiff tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/07/3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2565"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c lzw\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-02T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1035508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035508"
        },
        {
          "name": "[oss-security] 20160407 CVE-2016-3621 libtiff: Out-of-bounds Read in the bmp2tiff tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/07/3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2565"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3621",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c lzw\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1035508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035508"
            },
            {
              "name": "[oss-security] 20160407 CVE-2016-3621 libtiff: Out-of-bounds Read in the bmp2tiff tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/07/3"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2565",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2565"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3621",
    "datePublished": "2016-10-03T16:00:00",
    "dateReserved": "2016-03-21T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.355Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12900

Vulnerability from cvelistv5

Published

2018-06-26 22:00

Modified

2024-08-05 08:45

Severity ?

Summary

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.

References

▼	URL	Tags
	http://bugzilla.maptools.org/show_bug.cgi?id=2798	x_refsource_MISC
	https://usn.ubuntu.com/3906-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3906-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2019:2053	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3419	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2020/dsa-4670	vendor-advisory, x_refsource_DEBIAN
	https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:45:02.541Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2798"
          },
          {
            "name": "USN-3906-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3906-1/"
          },
          {
            "name": "USN-3906-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3906-2/"
          },
          {
            "name": "RHSA-2019:2053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2053"
          },
          {
            "name": "RHSA-2019:3419",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3419"
          },
          {
            "name": "[debian-lts-announce] 20191126 [SECURITY] [DLA 2009-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html"
          },
          {
            "name": "DSA-4670",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4670"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-03-05T18:18:41",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2798"
        },
        {
          "name": "USN-3906-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3906-1/"
        },
        {
          "name": "USN-3906-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3906-2/"
        },
        {
          "name": "RHSA-2019:2053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2053"
        },
        {
          "name": "RHSA-2019:3419",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3419"
        },
        {
          "name": "[debian-lts-announce] 20191126 [SECURITY] [DLA 2009-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html"
        },
        {
          "name": "DSA-4670",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4670"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-12900",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2798",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2798"
            },
            {
              "name": "USN-3906-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3906-1/"
            },
            {
              "name": "USN-3906-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3906-2/"
            },
            {
              "name": "RHSA-2019:2053",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2053"
            },
            {
              "name": "RHSA-2019:3419",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3419"
            },
            {
              "name": "[debian-lts-announce] 20191126 [SECURITY] [DLA 2009-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html"
            },
            {
              "name": "DSA-4670",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4670"
            },
            {
              "name": "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900",
              "refsource": "MISC",
              "url": "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-12900",
    "datePublished": "2018-06-26T22:00:00",
    "dateReserved": "2018-06-26T00:00:00",
    "dateUpdated": "2024-08-05T08:45:02.541Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-9147

Vulnerability from cvelistv5

Published

2017-05-22 18:00

Modified

2024-08-05 16:55

Severity ?

Summary

LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file.

References

▼	URL	Tags
	https://usn.ubuntu.com/3606-1/	vendor-advisory, x_refsource_UBUNTU
	http://bugzilla.maptools.org/show_bug.cgi?id=2693	x_refsource_MISC
	https://www.exploit-db.com/exploits/42301/	exploit, x_refsource_EXPLOIT-DB
	http://www.securityfocus.com/bid/98594	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3903	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:55:22.365Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3606-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3606-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2693"
          },
          {
            "name": "42301",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42301/"
          },
          {
            "name": "98594",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98594"
          },
          {
            "name": "DSA-3903",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3903"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-27T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3606-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3606-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2693"
        },
        {
          "name": "42301",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42301/"
        },
        {
          "name": "98594",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98594"
        },
        {
          "name": "DSA-3903",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3903"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9147",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3606-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3606-1/"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2693",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2693"
            },
            {
              "name": "42301",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42301/"
            },
            {
              "name": "98594",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98594"
            },
            {
              "name": "DSA-3903",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3903"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9147",
    "datePublished": "2017-05-22T18:00:00",
    "dateReserved": "2017-05-22T00:00:00",
    "dateUpdated": "2024-08-05T16:55:22.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3620

Vulnerability from cvelistv5

Published

2016-10-03 16:00

Modified

2024-08-06 00:03

Severity ?

Summary

The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1035508	vdb-entry, x_refsource_SECTRACK
	http://bugzilla.maptools.org/show_bug.cgi?id=2570	x_refsource_MISC
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/04/07/2	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.323Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1035508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035508"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2570"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "[oss-security] 20160407 CVE-2016-3620 libtiff: Out-of-bounds Read in the bmp2tiff tool",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/07/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c zip\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-02T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1035508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035508"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2570"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "[oss-security] 20160407 CVE-2016-3620 libtiff: Out-of-bounds Read in the bmp2tiff tool",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/07/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c zip\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1035508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035508"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2570",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2570"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "[oss-security] 20160407 CVE-2016-3620 libtiff: Out-of-bounds Read in the bmp2tiff tool",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/07/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3620",
    "datePublished": "2016-10-03T16:00:00",
    "dateReserved": "2016-03-21T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-18661

Vulnerability from cvelistv5

Published

2018-10-26 13:00

Modified

2024-08-05 11:15

Severity ?

Summary

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.

References

▼	URL	Tags
	https://usn.ubuntu.com/3864-1/	vendor-advisory, x_refsource_UBUNTU
	http://bugzilla.maptools.org/show_bug.cgi?id=2819	x_refsource_MISC
	http://www.securityfocus.com/bid/105762	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2019:2053	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:15:59.945Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3864-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3864-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2819"
          },
          {
            "name": "105762",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105762"
          },
          {
            "name": "RHSA-2019:2053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2053"
          },
          {
            "name": "[debian-lts-announce] 20191126 [SECURITY] [DLA 2009-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-26T23:07:16",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3864-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3864-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2819"
        },
        {
          "name": "105762",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105762"
        },
        {
          "name": "RHSA-2019:2053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2053"
        },
        {
          "name": "[debian-lts-announce] 20191126 [SECURITY] [DLA 2009-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18661",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3864-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3864-1/"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2819",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2819"
            },
            {
              "name": "105762",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105762"
            },
            {
              "name": "RHSA-2019:2053",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2053"
            },
            {
              "name": "[debian-lts-announce] 20191126 [SECURITY] [DLA 2009-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18661",
    "datePublished": "2018-10-26T13:00:00",
    "dateReserved": "2018-10-26T00:00:00",
    "dateUpdated": "2024-08-05T11:15:59.945Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-17942

Vulnerability from cvelistv5

Published

2017-12-28 06:00

Modified

2024-08-05 21:06

Severity ?

Summary

In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.

References

▼	URL	Tags
	http://bugzilla.maptools.org/show_bug.cgi?id=2767	x_refsource_MISC
	http://www.securityfocus.com/bid/102312	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:06:49.734Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2767"
          },
          {
            "name": "102312",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102312"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-30T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2767"
        },
        {
          "name": "102312",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102312"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17942",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2767",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2767"
            },
            {
              "name": "102312",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102312"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17942",
    "datePublished": "2017-12-28T06:00:00",
    "dateReserved": "2017-12-28T00:00:00",
    "dateUpdated": "2024-08-05T21:06:49.734Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-8870

Vulnerability from cvelistv5

Published

2016-12-06 18:00

Modified

2024-08-06 08:29

Severity ?

Summary

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/94717	vdb-entry, x_refsource_BID
	http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gz	x_refsource_CONFIRM
	http://www.floyd.ch/?p=874BMP	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2017-0225.html	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:29:22.080Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "94717",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94717"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gz"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.floyd.ch/?p=874BMP"
          },
          {
            "name": "RHSA-2017:0225",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "94717",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94717"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gz"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.floyd.ch/?p=874BMP"
        },
        {
          "name": "RHSA-2017:0225",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-8870",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "94717",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94717"
            },
            {
              "name": "http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gz",
              "refsource": "CONFIRM",
              "url": "http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gz"
            },
            {
              "name": "http://www.floyd.ch/?p=874BMP",
              "refsource": "MISC",
              "url": "http://www.floyd.ch/?p=874BMP"
            },
            {
              "name": "RHSA-2017:0225",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-8870",
    "datePublished": "2016-12-06T18:00:00",
    "dateReserved": "2016-05-02T00:00:00",
    "dateUpdated": "2024-08-06T08:29:22.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature