Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2023-38289
Vulnerability from cvelistv5
Not a Security Issue.
Show details on NVD website{ containers: { cna: { providerMetadata: { dateUpdated: "2023-08-24T08:11:14.459Z", orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", shortName: "redhat", }, rejectedReasons: [ { lang: "en", value: "Not a Security Issue.", }, ], }, }, cveMetadata: { assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", assignerShortName: "redhat", cveId: "CVE-2023-38289", dateRejected: "2023-08-24T08:11:14.459Z", dateReserved: "2023-07-14T11:42:17.255Z", dateUpdated: "2023-08-24T08:11:14.459Z", state: "REJECTED", }, dataType: "CVE_RECORD", dataVersion: "5.0", "vulnerability-lookup:meta": { fkie_nvd: { descriptions: "[{\"lang\": \"en\", \"value\": \"Rejected reason: Not a Security Issue.\"}]", id: "CVE-2023-38289", lastModified: "2023-11-07T04:17:14.330", published: "2023-08-24T09:15:10.510", sourceIdentifier: "secalert@redhat.com", vulnStatus: "Rejected", }, nvd: "{\"cve\":{\"id\":\"CVE-2023-38289\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2023-08-24T09:15:10.510\",\"lastModified\":\"2023-11-07T04:17:14.330\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: Not a Security Issue.\"}],\"metrics\":{},\"references\":[]}}", }, }
suse-su-2023:4371-1
Vulnerability from csaf_suse
Published
2023-11-06 08:52
Modified
2023-11-06 08:52
Summary
Security update for tiff
Notes
Title of the patch
Security update for tiff
Description of the patch
This update for tiff fixes the following issues:
- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff
(bsc#1213589).
- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).
- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).
- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).
- CVE-2023-26966: Fixed an out of bounds read when transforming a
little-endian file to a big-endian output (bsc#1212881)
- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3
files (bsc#1213274).
- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer
arithmetic on a NULL pointer (bsc#1212888).
- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file
in an inaccessible path (bsc#1212535).
- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
Patchnames
SUSE-2023-4371,SUSE-SLE-SDK-12-SP5-2023-4371,SUSE-SLE-SERVER-12-SP5-2023-4371
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for tiff", title: "Title of the patch", }, { category: "description", text: "This update for tiff fixes the following issues:\n\n- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff\n (bsc#1213589).\n- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).\n- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).\n- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).\n- CVE-2023-26966: Fixed an out of bounds read when transforming a\n little-endian file to a big-endian output (bsc#1212881)\n- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3\n files (bsc#1213274).\n- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer\n arithmetic on a NULL pointer (bsc#1212888).\n- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file\n in an inaccessible path (bsc#1212535).\n- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2023-4371,SUSE-SLE-SDK-12-SP5-2023-4371,SUSE-SLE-SERVER-12-SP5-2023-4371", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4371-1.json", }, { category: "self", summary: "URL for SUSE-SU-2023:4371-1", url: "https://www.suse.com/support/update/announcement/2023/suse-su-20234371-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2023:4371-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-November/016999.html", }, { category: "self", summary: "SUSE Bug 1212535", url: "https://bugzilla.suse.com/1212535", }, { category: "self", summary: "SUSE Bug 1212881", url: "https://bugzilla.suse.com/1212881", }, { category: "self", summary: "SUSE Bug 1212883", url: "https://bugzilla.suse.com/1212883", }, { category: "self", summary: "SUSE Bug 1212888", url: "https://bugzilla.suse.com/1212888", }, { category: "self", summary: "SUSE Bug 1213273", url: "https://bugzilla.suse.com/1213273", }, { category: "self", summary: "SUSE Bug 1213274", url: "https://bugzilla.suse.com/1213274", }, { category: "self", summary: "SUSE Bug 1213589", url: "https://bugzilla.suse.com/1213589", }, { category: "self", summary: "SUSE Bug 1213590", url: "https://bugzilla.suse.com/1213590", }, { category: "self", summary: "SUSE Bug 1214574", url: "https://bugzilla.suse.com/1214574", }, { category: "self", summary: "SUSE CVE CVE-2020-18768 page", url: "https://www.suse.com/security/cve/CVE-2020-18768/", }, { category: "self", summary: "SUSE CVE CVE-2023-25433 page", url: "https://www.suse.com/security/cve/CVE-2023-25433/", }, { category: "self", summary: "SUSE CVE CVE-2023-26966 page", url: "https://www.suse.com/security/cve/CVE-2023-26966/", }, { category: "self", summary: "SUSE CVE CVE-2023-2908 page", url: "https://www.suse.com/security/cve/CVE-2023-2908/", }, { category: "self", summary: "SUSE CVE CVE-2023-3316 page", url: "https://www.suse.com/security/cve/CVE-2023-3316/", }, { category: "self", summary: "SUSE CVE CVE-2023-3576 page", url: "https://www.suse.com/security/cve/CVE-2023-3576/", }, { category: "self", summary: "SUSE CVE CVE-2023-3618 page", url: "https://www.suse.com/security/cve/CVE-2023-3618/", }, { category: "self", summary: "SUSE CVE CVE-2023-38288 page", url: "https://www.suse.com/security/cve/CVE-2023-38288/", }, { category: "self", summary: "SUSE CVE CVE-2023-38289 page", url: "https://www.suse.com/security/cve/CVE-2023-38289/", }, ], title: "Security update for tiff", tracking: { current_release_date: "2023-11-06T08:52:20Z", generator: { date: "2023-11-06T08:52:20Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2023:4371-1", initial_release_date: "2023-11-06T08:52:20Z", revision_history: [ { date: "2023-11-06T08:52:20Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-44.71.1.aarch64", product: { name: "libtiff-devel-4.0.9-44.71.1.aarch64", product_id: "libtiff-devel-4.0.9-44.71.1.aarch64", }, }, { category: "product_version", name: "libtiff5-4.0.9-44.71.1.aarch64", product: { name: "libtiff5-4.0.9-44.71.1.aarch64", product_id: "libtiff5-4.0.9-44.71.1.aarch64", }, }, { category: "product_version", name: "tiff-4.0.9-44.71.1.aarch64", product: { name: "tiff-4.0.9-44.71.1.aarch64", product_id: "tiff-4.0.9-44.71.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "libtiff-devel-64bit-4.0.9-44.71.1.aarch64_ilp32", product: { name: "libtiff-devel-64bit-4.0.9-44.71.1.aarch64_ilp32", product_id: "libtiff-devel-64bit-4.0.9-44.71.1.aarch64_ilp32", }, }, { category: "product_version", name: "libtiff5-64bit-4.0.9-44.71.1.aarch64_ilp32", product: { name: "libtiff5-64bit-4.0.9-44.71.1.aarch64_ilp32", product_id: "libtiff5-64bit-4.0.9-44.71.1.aarch64_ilp32", }, }, ], category: "architecture", name: "aarch64_ilp32", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-44.71.1.i586", product: { name: "libtiff-devel-4.0.9-44.71.1.i586", product_id: "libtiff-devel-4.0.9-44.71.1.i586", }, }, { category: "product_version", name: "libtiff5-4.0.9-44.71.1.i586", product: { name: "libtiff5-4.0.9-44.71.1.i586", product_id: "libtiff5-4.0.9-44.71.1.i586", }, }, { category: "product_version", name: "tiff-4.0.9-44.71.1.i586", product: { name: "tiff-4.0.9-44.71.1.i586", product_id: "tiff-4.0.9-44.71.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-44.71.1.ppc64le", product: { name: "libtiff-devel-4.0.9-44.71.1.ppc64le", product_id: "libtiff-devel-4.0.9-44.71.1.ppc64le", }, }, { category: "product_version", name: "libtiff5-4.0.9-44.71.1.ppc64le", product: { name: "libtiff5-4.0.9-44.71.1.ppc64le", product_id: "libtiff5-4.0.9-44.71.1.ppc64le", }, }, { category: "product_version", name: "tiff-4.0.9-44.71.1.ppc64le", product: { name: "tiff-4.0.9-44.71.1.ppc64le", product_id: "tiff-4.0.9-44.71.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-44.71.1.s390", product: { name: "libtiff-devel-4.0.9-44.71.1.s390", product_id: "libtiff-devel-4.0.9-44.71.1.s390", }, }, { category: "product_version", name: "libtiff5-4.0.9-44.71.1.s390", product: { name: "libtiff5-4.0.9-44.71.1.s390", product_id: "libtiff5-4.0.9-44.71.1.s390", }, }, { category: "product_version", name: "tiff-4.0.9-44.71.1.s390", product: { name: "tiff-4.0.9-44.71.1.s390", product_id: "tiff-4.0.9-44.71.1.s390", }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-44.71.1.s390x", product: { name: "libtiff-devel-4.0.9-44.71.1.s390x", product_id: "libtiff-devel-4.0.9-44.71.1.s390x", }, }, { category: "product_version", name: "libtiff-devel-32bit-4.0.9-44.71.1.s390x", product: { name: "libtiff-devel-32bit-4.0.9-44.71.1.s390x", product_id: "libtiff-devel-32bit-4.0.9-44.71.1.s390x", }, }, { category: "product_version", name: "libtiff5-4.0.9-44.71.1.s390x", product: { name: "libtiff5-4.0.9-44.71.1.s390x", product_id: "libtiff5-4.0.9-44.71.1.s390x", }, }, { category: "product_version", name: "libtiff5-32bit-4.0.9-44.71.1.s390x", product: { name: "libtiff5-32bit-4.0.9-44.71.1.s390x", product_id: "libtiff5-32bit-4.0.9-44.71.1.s390x", }, }, { category: "product_version", name: "tiff-4.0.9-44.71.1.s390x", product: { name: "tiff-4.0.9-44.71.1.s390x", product_id: "tiff-4.0.9-44.71.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-44.71.1.x86_64", product: { name: "libtiff-devel-4.0.9-44.71.1.x86_64", product_id: "libtiff-devel-4.0.9-44.71.1.x86_64", }, }, { category: "product_version", name: "libtiff-devel-32bit-4.0.9-44.71.1.x86_64", product: { name: "libtiff-devel-32bit-4.0.9-44.71.1.x86_64", product_id: "libtiff-devel-32bit-4.0.9-44.71.1.x86_64", }, }, { category: "product_version", name: "libtiff5-4.0.9-44.71.1.x86_64", product: { name: "libtiff5-4.0.9-44.71.1.x86_64", product_id: "libtiff5-4.0.9-44.71.1.x86_64", }, }, { category: "product_version", name: "libtiff5-32bit-4.0.9-44.71.1.x86_64", product: { name: "libtiff5-32bit-4.0.9-44.71.1.x86_64", product_id: "libtiff5-32bit-4.0.9-44.71.1.x86_64", }, }, { category: "product_version", name: "tiff-4.0.9-44.71.1.x86_64", product: { name: "tiff-4.0.9-44.71.1.x86_64", product_id: "tiff-4.0.9-44.71.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Software Development Kit 12 SP5", product: { name: "SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sle-sdk:12:sp5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP5", product: { name: "SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp5", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", }, product_reference: "libtiff-devel-4.0.9-44.71.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", }, product_reference: "libtiff-devel-4.0.9-44.71.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", }, product_reference: "libtiff-devel-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", }, product_reference: "libtiff-devel-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", }, product_reference: "libtiff5-4.0.9-44.71.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", }, product_reference: "libtiff5-4.0.9-44.71.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", }, product_reference: "libtiff5-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", }, product_reference: "libtiff5-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", }, product_reference: "libtiff5-32bit-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", }, product_reference: "libtiff5-32bit-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", }, product_reference: "tiff-4.0.9-44.71.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", }, product_reference: "tiff-4.0.9-44.71.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", }, product_reference: "tiff-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", }, product_reference: "tiff-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", }, product_reference: "libtiff5-4.0.9-44.71.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", }, product_reference: "libtiff5-4.0.9-44.71.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", }, product_reference: "libtiff5-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", }, product_reference: "libtiff5-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", }, product_reference: "libtiff5-32bit-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", }, product_reference: "libtiff5-32bit-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", }, product_reference: "tiff-4.0.9-44.71.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", }, product_reference: "tiff-4.0.9-44.71.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", }, product_reference: "tiff-4.0.9-44.71.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", }, product_reference: "tiff-4.0.9-44.71.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, ], }, vulnerabilities: [ { cve: "CVE-2020-18768", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-18768", }, ], notes: [ { category: "general", text: "There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-18768", url: "https://www.suse.com/security/cve/CVE-2020-18768", }, { category: "external", summary: "SUSE Bug 1214574 for CVE-2020-18768", url: "https://bugzilla.suse.com/1214574", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "moderate", }, ], title: "CVE-2020-18768", }, { cve: "CVE-2023-25433", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-25433", }, ], notes: [ { category: "general", text: "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-25433", url: "https://www.suse.com/security/cve/CVE-2023-25433", }, { category: "external", summary: "SUSE Bug 1212883 for CVE-2023-25433", url: "https://bugzilla.suse.com/1212883", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "moderate", }, ], title: "CVE-2023-25433", }, { cve: "CVE-2023-26966", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-26966", }, ], notes: [ { category: "general", text: "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-26966", url: "https://www.suse.com/security/cve/CVE-2023-26966", }, { category: "external", summary: "SUSE Bug 1212881 for CVE-2023-26966", url: "https://bugzilla.suse.com/1212881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "moderate", }, ], title: "CVE-2023-26966", }, { cve: "CVE-2023-2908", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-2908", }, ], notes: [ { category: "general", text: "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-2908", url: "https://www.suse.com/security/cve/CVE-2023-2908", }, { category: "external", summary: "SUSE Bug 1212888 for CVE-2023-2908", url: "https://bugzilla.suse.com/1212888", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "moderate", }, ], title: "CVE-2023-2908", }, { cve: "CVE-2023-3316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-3316", }, ], notes: [ { category: "general", text: "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.\n\n", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-3316", url: "https://www.suse.com/security/cve/CVE-2023-3316", }, { category: "external", summary: "SUSE Bug 1212535 for CVE-2023-3316", url: "https://bugzilla.suse.com/1212535", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "moderate", }, ], title: "CVE-2023-3316", }, { cve: "CVE-2023-3576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-3576", }, ], notes: [ { category: "general", text: "A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-3576", url: "https://www.suse.com/security/cve/CVE-2023-3576", }, { category: "external", summary: "SUSE Bug 1213273 for CVE-2023-3576", url: "https://bugzilla.suse.com/1213273", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "low", }, ], title: "CVE-2023-3576", }, { cve: "CVE-2023-3618", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-3618", }, ], notes: [ { category: "general", text: "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-3618", url: "https://www.suse.com/security/cve/CVE-2023-3618", }, { category: "external", summary: "SUSE Bug 1213274 for CVE-2023-3618", url: "https://bugzilla.suse.com/1213274", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "moderate", }, ], title: "CVE-2023-3618", }, { cve: "CVE-2023-38288", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-38288", }, ], notes: [ { category: "general", text: "** REJECT ** Not a Security Issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-38288", url: "https://www.suse.com/security/cve/CVE-2023-38288", }, { category: "external", summary: "SUSE Bug 1213590 for CVE-2023-38288", url: "https://bugzilla.suse.com/1213590", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "low", }, ], title: "CVE-2023-38288", }, { cve: "CVE-2023-38289", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-38289", }, ], notes: [ { category: "general", text: "** REJECT ** Not a Security Issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-38289", url: "https://www.suse.com/security/cve/CVE-2023-38289", }, { category: "external", summary: "SUSE Bug 1213589 for CVE-2023-38289", url: "https://bugzilla.suse.com/1213589", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:52:20Z", details: "low", }, ], title: "CVE-2023-38289", }, ], }
suse-su-2023:4370-1
Vulnerability from csaf_suse
Published
2023-11-06 08:51
Modified
2023-11-06 08:51
Summary
Security update for tiff
Notes
Title of the patch
Security update for tiff
Description of the patch
This update for tiff fixes the following issues:
- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff
(bsc#1213589).
- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).
- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).
- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).
- CVE-2023-26966: Fixed an out of bounds read when transforming a
little-endian file to a big-endian output (bsc#1212881)
- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3
files (bsc#1213274).
- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer
arithmetic on a NULL pointer (bsc#1212888).
- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file
in an inaccessible path (bsc#1212535).
- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
Patchnames
SUSE-2023-4370,SUSE-SLE-Micro-5.3-2023-4370,SUSE-SLE-Micro-5.4-2023-4370,SUSE-SLE-Micro-5.5-2023-4370,SUSE-SLE-Module-Basesystem-15-SP4-2023-4370,SUSE-SLE-Module-Basesystem-15-SP5-2023-4370,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4370,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4370,SUSE-SUSE-MicroOS-5.2-2023-4370,openSUSE-Leap-Micro-5.3-2023-4370,openSUSE-Leap-Micro-5.4-2023-4370,openSUSE-SLE-15.4-2023-4370,openSUSE-SLE-15.5-2023-4370
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for tiff", title: "Title of the patch", }, { category: "description", text: "This update for tiff fixes the following issues:\n\n- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff\n (bsc#1213589).\n- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).\n- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).\n- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).\n- CVE-2023-26966: Fixed an out of bounds read when transforming a\n little-endian file to a big-endian output (bsc#1212881)\n- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3\n files (bsc#1213274).\n- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer\n arithmetic on a NULL pointer (bsc#1212888).\n- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file\n in an inaccessible path (bsc#1212535).\n- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2023-4370,SUSE-SLE-Micro-5.3-2023-4370,SUSE-SLE-Micro-5.4-2023-4370,SUSE-SLE-Micro-5.5-2023-4370,SUSE-SLE-Module-Basesystem-15-SP4-2023-4370,SUSE-SLE-Module-Basesystem-15-SP5-2023-4370,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4370,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4370,SUSE-SUSE-MicroOS-5.2-2023-4370,openSUSE-Leap-Micro-5.3-2023-4370,openSUSE-Leap-Micro-5.4-2023-4370,openSUSE-SLE-15.4-2023-4370,openSUSE-SLE-15.5-2023-4370", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4370-1.json", }, { category: "self", summary: "URL for SUSE-SU-2023:4370-1", url: "https://www.suse.com/support/update/announcement/2023/suse-su-20234370-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2023:4370-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-November/017000.html", }, { category: "self", summary: "SUSE Bug 1212535", url: "https://bugzilla.suse.com/1212535", }, { category: "self", summary: "SUSE Bug 1212881", url: "https://bugzilla.suse.com/1212881", }, { category: "self", summary: "SUSE Bug 1212883", url: "https://bugzilla.suse.com/1212883", }, { category: "self", summary: "SUSE Bug 1212888", url: "https://bugzilla.suse.com/1212888", }, { category: "self", summary: "SUSE Bug 1213273", url: "https://bugzilla.suse.com/1213273", }, { category: "self", summary: "SUSE Bug 1213274", url: "https://bugzilla.suse.com/1213274", }, { category: "self", summary: "SUSE Bug 1213589", url: "https://bugzilla.suse.com/1213589", }, { category: "self", summary: "SUSE Bug 1213590", url: "https://bugzilla.suse.com/1213590", }, { category: "self", summary: "SUSE Bug 1214574", url: "https://bugzilla.suse.com/1214574", }, { category: "self", summary: "SUSE CVE CVE-2020-18768 page", url: "https://www.suse.com/security/cve/CVE-2020-18768/", }, { category: "self", summary: "SUSE CVE CVE-2023-25433 page", url: "https://www.suse.com/security/cve/CVE-2023-25433/", }, { category: "self", summary: "SUSE CVE CVE-2023-26966 page", url: "https://www.suse.com/security/cve/CVE-2023-26966/", }, { category: "self", summary: "SUSE CVE CVE-2023-2908 page", url: "https://www.suse.com/security/cve/CVE-2023-2908/", }, { category: "self", summary: "SUSE CVE CVE-2023-3316 page", url: "https://www.suse.com/security/cve/CVE-2023-3316/", }, { category: "self", summary: "SUSE CVE CVE-2023-3576 page", url: "https://www.suse.com/security/cve/CVE-2023-3576/", }, { category: "self", summary: "SUSE CVE CVE-2023-3618 page", url: "https://www.suse.com/security/cve/CVE-2023-3618/", }, { category: "self", summary: "SUSE CVE CVE-2023-38288 page", url: "https://www.suse.com/security/cve/CVE-2023-38288/", }, { category: "self", summary: "SUSE CVE CVE-2023-38289 page", url: "https://www.suse.com/security/cve/CVE-2023-38289/", }, ], title: "Security update for tiff", tracking: { current_release_date: "2023-11-06T08:51:27Z", generator: { date: "2023-11-06T08:51:27Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2023:4370-1", initial_release_date: "2023-11-06T08:51:27Z", revision_history: [ { date: "2023-11-06T08:51:27Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", product: { name: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", product_id: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", }, }, { category: "product_version", name: "libtiff5-4.0.9-150000.45.32.1.aarch64", product: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64", product_id: "libtiff5-4.0.9-150000.45.32.1.aarch64", }, }, { category: "product_version", name: "tiff-4.0.9-150000.45.32.1.aarch64", product: { name: "tiff-4.0.9-150000.45.32.1.aarch64", product_id: "tiff-4.0.9-150000.45.32.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "libtiff-devel-64bit-4.0.9-150000.45.32.1.aarch64_ilp32", product: { name: "libtiff-devel-64bit-4.0.9-150000.45.32.1.aarch64_ilp32", product_id: "libtiff-devel-64bit-4.0.9-150000.45.32.1.aarch64_ilp32", }, }, { category: "product_version", name: "libtiff5-64bit-4.0.9-150000.45.32.1.aarch64_ilp32", product: { name: "libtiff5-64bit-4.0.9-150000.45.32.1.aarch64_ilp32", product_id: "libtiff5-64bit-4.0.9-150000.45.32.1.aarch64_ilp32", }, }, ], category: "architecture", name: "aarch64_ilp32", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-150000.45.32.1.i586", product: { name: "libtiff-devel-4.0.9-150000.45.32.1.i586", product_id: "libtiff-devel-4.0.9-150000.45.32.1.i586", }, }, { category: "product_version", name: "libtiff5-4.0.9-150000.45.32.1.i586", product: { name: "libtiff5-4.0.9-150000.45.32.1.i586", product_id: "libtiff5-4.0.9-150000.45.32.1.i586", }, }, { category: "product_version", name: "tiff-4.0.9-150000.45.32.1.i586", product: { name: "tiff-4.0.9-150000.45.32.1.i586", product_id: "tiff-4.0.9-150000.45.32.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", product: { name: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", product_id: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", }, }, { category: "product_version", name: "libtiff5-4.0.9-150000.45.32.1.ppc64le", product: { name: "libtiff5-4.0.9-150000.45.32.1.ppc64le", product_id: "libtiff5-4.0.9-150000.45.32.1.ppc64le", }, }, { category: "product_version", name: "tiff-4.0.9-150000.45.32.1.ppc64le", product: { name: "tiff-4.0.9-150000.45.32.1.ppc64le", product_id: "tiff-4.0.9-150000.45.32.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-150000.45.32.1.s390x", product: { name: "libtiff-devel-4.0.9-150000.45.32.1.s390x", product_id: "libtiff-devel-4.0.9-150000.45.32.1.s390x", }, }, { category: "product_version", name: "libtiff5-4.0.9-150000.45.32.1.s390x", product: { name: "libtiff5-4.0.9-150000.45.32.1.s390x", product_id: "libtiff5-4.0.9-150000.45.32.1.s390x", }, }, { category: "product_version", name: "tiff-4.0.9-150000.45.32.1.s390x", product: { name: "tiff-4.0.9-150000.45.32.1.s390x", product_id: "tiff-4.0.9-150000.45.32.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", product: { name: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", product_id: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", }, }, { category: "product_version", name: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", product: { name: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", product_id: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", }, }, { category: "product_version", name: "libtiff5-4.0.9-150000.45.32.1.x86_64", product: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64", product_id: "libtiff5-4.0.9-150000.45.32.1.x86_64", }, }, { category: "product_version", name: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", product: { name: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", product_id: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", }, }, { category: "product_version", name: "tiff-4.0.9-150000.45.32.1.x86_64", product: { name: "tiff-4.0.9-150000.45.32.1.x86_64", product_id: "tiff-4.0.9-150000.45.32.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Micro 5.3", product: { name: "SUSE Linux Enterprise Micro 5.3", product_id: "SUSE Linux Enterprise Micro 5.3", product_identification_helper: { cpe: "cpe:/o:suse:sle-micro:5.3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Micro 5.4", product: { name: "SUSE Linux Enterprise Micro 5.4", product_id: "SUSE Linux Enterprise Micro 5.4", product_identification_helper: { cpe: "cpe:/o:suse:sle-micro:5.4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Micro 5.5", product: { name: "SUSE Linux Enterprise Micro 5.5", product_id: "SUSE Linux Enterprise Micro 5.5", product_identification_helper: { cpe: "cpe:/o:suse:sle-micro:5.5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Module for Basesystem 15 SP4", product: { name: "SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-basesystem:15:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Module for Basesystem 15 SP5", product: { name: "SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-basesystem:15:sp5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Module for Package Hub 15 SP4", product: { name: "SUSE Linux Enterprise Module for Package Hub 15 SP4", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4", product_identification_helper: { cpe: "cpe:/o:suse:packagehub:15:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Module for Package Hub 15 SP5", product: { name: "SUSE Linux Enterprise Module for Package Hub 15 SP5", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5", product_identification_helper: { cpe: "cpe:/o:suse:packagehub:15:sp5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Micro 5.2", product: { name: "SUSE Linux Enterprise Micro 5.2", product_id: "SUSE Linux Enterprise Micro 5.2", product_identification_helper: { cpe: "cpe:/o:suse:suse-microos:5.2", }, }, }, { category: "product_name", name: "openSUSE Leap Micro 5.3", product: { name: "openSUSE Leap Micro 5.3", product_id: "openSUSE Leap Micro 5.3", product_identification_helper: { cpe: "cpe:/o:opensuse:leap-micro:5.3", }, }, }, { category: "product_name", name: "openSUSE Leap Micro 5.4", product: { name: "openSUSE Leap Micro 5.4", product_id: "openSUSE Leap Micro 5.4", product_identification_helper: { cpe: "cpe:/o:opensuse:leap-micro:5.4", }, }, }, { category: "product_name", name: "openSUSE Leap 15.4", product: { name: "openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4", product_identification_helper: { cpe: "cpe:/o:opensuse:leap:15.4", }, }, }, { category: "product_name", name: "openSUSE Leap 15.5", product: { name: "openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5", product_identification_helper: { cpe: "cpe:/o:opensuse:leap:15.5", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3", product_id: "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.3", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Micro 5.3", product_id: "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.3", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3", product_id: "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.3", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4", product_id: "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Micro 5.4", product_id: "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4", product_id: "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5", product_id: "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Micro 5.5", product_id: "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5", product_id: "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", }, product_reference: "tiff-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "tiff-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", }, product_reference: "tiff-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", }, product_reference: "tiff-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", }, product_reference: "tiff-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "tiff-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", }, product_reference: "tiff-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5", product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", }, product_reference: "tiff-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2", product_id: "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.2", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of SUSE Linux Enterprise Micro 5.2", product_id: "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.2", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2", product_id: "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Micro 5.2", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap Micro 5.3", product_id: "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap Micro 5.3", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap Micro 5.3", product_id: "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap Micro 5.3", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap Micro 5.4", product_id: "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap Micro 5.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap Micro 5.4", product_id: "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap Micro 5.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap Micro 5.4", product_id: "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap Micro 5.4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", }, product_reference: "tiff-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "tiff-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", }, product_reference: "tiff-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", }, product_reference: "tiff-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff-devel-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.ppc64le as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", }, product_reference: "libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.aarch64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", }, product_reference: "tiff-4.0.9-150000.45.32.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.ppc64le as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", }, product_reference: "tiff-4.0.9-150000.45.32.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.s390x as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", }, product_reference: "tiff-4.0.9-150000.45.32.1.s390x", relates_to_product_reference: "openSUSE Leap 15.5", }, { category: "default_component_of", full_product_name: { name: "tiff-4.0.9-150000.45.32.1.x86_64 as component of openSUSE Leap 15.5", product_id: "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", }, product_reference: "tiff-4.0.9-150000.45.32.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.5", }, ], }, vulnerabilities: [ { cve: "CVE-2020-18768", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-18768", }, ], notes: [ { category: "general", text: "There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-18768", url: "https://www.suse.com/security/cve/CVE-2020-18768", }, { category: "external", summary: "SUSE Bug 1214574 for CVE-2020-18768", url: "https://bugzilla.suse.com/1214574", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "moderate", }, ], title: "CVE-2020-18768", }, { cve: "CVE-2023-25433", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-25433", }, ], notes: [ { category: "general", text: "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-25433", url: "https://www.suse.com/security/cve/CVE-2023-25433", }, { category: "external", summary: "SUSE Bug 1212883 for CVE-2023-25433", url: "https://bugzilla.suse.com/1212883", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "moderate", }, ], title: "CVE-2023-25433", }, { cve: "CVE-2023-26966", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-26966", }, ], notes: [ { category: "general", text: "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-26966", url: "https://www.suse.com/security/cve/CVE-2023-26966", }, { category: "external", summary: "SUSE Bug 1212881 for CVE-2023-26966", url: "https://bugzilla.suse.com/1212881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "moderate", }, ], title: "CVE-2023-26966", }, { cve: "CVE-2023-2908", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-2908", }, ], notes: [ { category: "general", text: "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-2908", url: "https://www.suse.com/security/cve/CVE-2023-2908", }, { category: "external", summary: "SUSE Bug 1212888 for CVE-2023-2908", url: "https://bugzilla.suse.com/1212888", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "moderate", }, ], title: "CVE-2023-2908", }, { cve: "CVE-2023-3316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-3316", }, ], notes: [ { category: "general", text: "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.\n\n", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-3316", url: "https://www.suse.com/security/cve/CVE-2023-3316", }, { category: "external", summary: "SUSE Bug 1212535 for CVE-2023-3316", url: "https://bugzilla.suse.com/1212535", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "moderate", }, ], title: "CVE-2023-3316", }, { cve: "CVE-2023-3576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-3576", }, ], notes: [ { category: "general", text: "A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-3576", url: "https://www.suse.com/security/cve/CVE-2023-3576", }, { category: "external", summary: "SUSE Bug 1213273 for CVE-2023-3576", url: "https://bugzilla.suse.com/1213273", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "low", }, ], title: "CVE-2023-3576", }, { cve: "CVE-2023-3618", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-3618", }, ], notes: [ { category: "general", text: "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-3618", url: "https://www.suse.com/security/cve/CVE-2023-3618", }, { category: "external", summary: "SUSE Bug 1213274 for CVE-2023-3618", url: "https://bugzilla.suse.com/1213274", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "moderate", }, ], title: "CVE-2023-3618", }, { cve: "CVE-2023-38288", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-38288", }, ], notes: [ { category: "general", text: "** REJECT ** Not a Security Issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-38288", url: "https://www.suse.com/security/cve/CVE-2023-38288", }, { category: "external", summary: "SUSE Bug 1213590 for CVE-2023-38288", url: "https://bugzilla.suse.com/1213590", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "low", }, ], title: "CVE-2023-38288", }, { cve: "CVE-2023-38289", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2023-38289", }, ], notes: [ { category: "general", text: "** REJECT ** Not a Security Issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2023-38289", url: "https://www.suse.com/security/cve/CVE-2023-38289", }, { category: "external", summary: "SUSE Bug 1213589 for CVE-2023-38289", url: "https://bugzilla.suse.com/1213589", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.2:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Micro 5.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP4:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP5:libtiff5-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP4:tiff-4.0.9-150000.45.32.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.4:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff-devel-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-32bit-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.ppc64le", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.s390x", "openSUSE Leap 15.5:tiff-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.3:libtiff5-4.0.9-150000.45.32.1.x86_64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.aarch64", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.s390x", "openSUSE Leap Micro 5.4:libtiff5-4.0.9-150000.45.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2023-11-06T08:51:27Z", details: "low", }, ], title: "CVE-2023-38289", }, ], }
fkie_cve-2023-38289
Vulnerability from fkie_nvd
Published
2023-08-24 09:15
Modified
2023-11-07 04:17
Severity ?
Summary
Rejected reason: Not a Security Issue.
References
▼ | URL | Tags |
---|
Impacted products
Vendor | Product | Version |
---|
{ cveTags: [], descriptions: [ { lang: "en", value: "Rejected reason: Not a Security Issue.", }, ], id: "CVE-2023-38289", lastModified: "2023-11-07T04:17:14.330", metrics: {}, published: "2023-08-24T09:15:10.510", references: [], sourceIdentifier: "secalert@redhat.com", vulnStatus: "Rejected", }
gsd-2023-38289
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
** REJECT ** Not a Security Issue.
Aliases
Aliases
{ GSD: { alias: "CVE-2023-38289", id: "GSD-2023-38289", }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2023-38289", ], details: "** REJECT ** Not a Security Issue.", id: "GSD-2023-38289", modified: "2023-12-13T01:20:36.135962Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2023-38289", STATE: "REJECT", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "** REJECT ** Not a Security Issue.", }, ], }, }, }, }
WID-SEC-W-2023-1858
Vulnerability from csaf_certbund
Published
2023-07-23 22:00
Modified
2024-03-24 23:00
Summary
libTIFF: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
libTIFF ist ein Softwarepaket für die Verarbeitung von Bilddateien in Tag Image File Format (TIFF).
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand zu verursachen.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "libTIFF ist ein Softwarepaket für die Verarbeitung von Bilddateien in Tag Image File Format (TIFF).", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand zu verursachen.", title: "Angriff", }, { category: "general", text: "- Linux\n- Sonstiges\n- UNIX", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-1858 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1858.json", }, { category: "self", summary: "WID-SEC-2023-1858 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1858", }, { category: "external", summary: "Red Hat Bugzilla – Bug 2224971 vom 2023-07-23", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2224971", }, { category: "external", summary: "Red Hat Bugzilla – Bug 2224974 vom 2023-07-23", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2224974", }, { category: "external", summary: "Debian Security Advisory DLA-3513 vom 2023-08-01", url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html", }, { category: "external", summary: "Ubuntu Security Notice USN-6290-1 vom 2023-08-16", url: "https://ubuntu.com/security/notices/USN-6290-1", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2024:0915-1 vom 2024-03-18", url: "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018183.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2024:0973-1 vom 2024-03-22", url: "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018188.html", }, ], source_lang: "en-US", title: "libTIFF: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS", tracking: { current_release_date: "2024-03-24T23:00:00.000+00:00", generator: { date: "2024-08-15T17:56:05.135+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-1858", initial_release_date: "2023-07-23T22:00:00.000+00:00", revision_history: [ { date: "2023-07-23T22:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2023-07-31T22:00:00.000+00:00", number: "2", summary: "Neue Updates von Debian aufgenommen", }, { date: "2023-08-15T22:00:00.000+00:00", number: "3", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2024-03-17T23:00:00.000+00:00", number: "4", summary: "Neue Updates von SUSE aufgenommen", }, { date: "2024-03-24T23:00:00.000+00:00", number: "5", summary: "Neue Updates von SUSE aufgenommen", }, ], status: "final", version: "5", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Debian Linux", product: { name: "Debian Linux", product_id: "2951", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:-", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { branches: [ { category: "product_version_range", name: "<= 4.5.1", product: { name: "Open Source libTIFF <= 4.5.1", product_id: "T028857", }, }, ], category: "product_name", name: "libTIFF", }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { category: "product_name", name: "Ubuntu Linux", product: { name: "Ubuntu Linux", product_id: "T000126", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:-", }, }, }, ], category: "vendor", name: "Ubuntu", }, ], }, vulnerabilities: [ { cve: "CVE-2023-38288", notes: [ { category: "description", text: "In libTIFF existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund von Integer-Überläufen in den Komponenten raw2tiff.c und tiffcp.c. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen. Für eine erfolgreiche Ausnutzung muss der Benutzer ein speziell präpariertes tiff-Bild öffnen.", }, ], product_status: { known_affected: [ "2951", "T002207", "T000126", "T028857", ], }, release_date: "2023-07-23T22:00:00.000+00:00", title: "CVE-2023-38288", }, { cve: "CVE-2023-38289", notes: [ { category: "description", text: "In libTIFF existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund von Integer-Überläufen in den Komponenten raw2tiff.c und tiffcp.c. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen. Für eine erfolgreiche Ausnutzung muss der Benutzer ein speziell präpariertes tiff-Bild öffnen.", }, ], product_status: { known_affected: [ "2951", "T002207", "T000126", "T028857", ], }, release_date: "2023-07-23T22:00:00.000+00:00", title: "CVE-2023-38289", }, ], }
wid-sec-w-2023-1858
Vulnerability from csaf_certbund
Published
2023-07-23 22:00
Modified
2024-03-24 23:00
Summary
libTIFF: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
libTIFF ist ein Softwarepaket für die Verarbeitung von Bilddateien in Tag Image File Format (TIFF).
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand zu verursachen.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "libTIFF ist ein Softwarepaket für die Verarbeitung von Bilddateien in Tag Image File Format (TIFF).", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand zu verursachen.", title: "Angriff", }, { category: "general", text: "- Linux\n- Sonstiges\n- UNIX", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-1858 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1858.json", }, { category: "self", summary: "WID-SEC-2023-1858 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1858", }, { category: "external", summary: "Red Hat Bugzilla – Bug 2224971 vom 2023-07-23", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2224971", }, { category: "external", summary: "Red Hat Bugzilla – Bug 2224974 vom 2023-07-23", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2224974", }, { category: "external", summary: "Debian Security Advisory DLA-3513 vom 2023-08-01", url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html", }, { category: "external", summary: "Ubuntu Security Notice USN-6290-1 vom 2023-08-16", url: "https://ubuntu.com/security/notices/USN-6290-1", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2024:0915-1 vom 2024-03-18", url: "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018183.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2024:0973-1 vom 2024-03-22", url: "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018188.html", }, ], source_lang: "en-US", title: "libTIFF: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS", tracking: { current_release_date: "2024-03-24T23:00:00.000+00:00", generator: { date: "2024-08-15T17:56:05.135+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-1858", initial_release_date: "2023-07-23T22:00:00.000+00:00", revision_history: [ { date: "2023-07-23T22:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2023-07-31T22:00:00.000+00:00", number: "2", summary: "Neue Updates von Debian aufgenommen", }, { date: "2023-08-15T22:00:00.000+00:00", number: "3", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2024-03-17T23:00:00.000+00:00", number: "4", summary: "Neue Updates von SUSE aufgenommen", }, { date: "2024-03-24T23:00:00.000+00:00", number: "5", summary: "Neue Updates von SUSE aufgenommen", }, ], status: "final", version: "5", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Debian Linux", product: { name: "Debian Linux", product_id: "2951", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:-", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { branches: [ { category: "product_version_range", name: "<= 4.5.1", product: { name: "Open Source libTIFF <= 4.5.1", product_id: "T028857", }, }, ], category: "product_name", name: "libTIFF", }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { category: "product_name", name: "Ubuntu Linux", product: { name: "Ubuntu Linux", product_id: "T000126", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:-", }, }, }, ], category: "vendor", name: "Ubuntu", }, ], }, vulnerabilities: [ { cve: "CVE-2023-38288", notes: [ { category: "description", text: "In libTIFF existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund von Integer-Überläufen in den Komponenten raw2tiff.c und tiffcp.c. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen. Für eine erfolgreiche Ausnutzung muss der Benutzer ein speziell präpariertes tiff-Bild öffnen.", }, ], product_status: { known_affected: [ "2951", "T002207", "T000126", "T028857", ], }, release_date: "2023-07-23T22:00:00.000+00:00", title: "CVE-2023-38288", }, { cve: "CVE-2023-38289", notes: [ { category: "description", text: "In libTIFF existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund von Integer-Überläufen in den Komponenten raw2tiff.c und tiffcp.c. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen. Für eine erfolgreiche Ausnutzung muss der Benutzer ein speziell präpariertes tiff-Bild öffnen.", }, ], product_status: { known_affected: [ "2951", "T002207", "T000126", "T028857", ], }, release_date: "2023-07-23T22:00:00.000+00:00", title: "CVE-2023-38289", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.