SUSE-SU-2018:1472-1
Vulnerability from csaf_suse - Published: 2018-05-30 07:08 - Updated: 2026-09-20 12:46Summary
Security update for tiff
Severity
Moderate
Notes
Title of the patch: Security update for tiff
Description of the patch: This update for tiff fixes the following issues:
Security issues fixed:
- CVE-2016-5315: The setByteArray function in tif_dir.c allowed remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. (bsc#984809)
- CVE-2016-10267: LibTIFF allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8. (bsc#1017694)
- CVE-2016-10269: LibTIFF allowed remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to 'READ of size 512' and libtiff/tif_unix.c:340:2. (bsc#1031254)
- CVE-2016-10270: LibTIFF allowed remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to 'READ of size 8' and libtiff/tif_read.c:523:22. (bsc#1031250)
- CVE-2017-18013: In LibTIFF, there was a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. (bsc#1074317)
- CVE-2017-7593: tif_read.c did not ensure that tif_rawdata is properly initialized, which might have allowed remote attackers to obtain sensitive information from process memory via a crafted image. (bsc#1033129)
- CVE-2017-7595: The JPEGSetupEncode function in tiff_jpeg.c allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. (bsc#1033127)
- CVE-2017-7596: LibTIFF had an 'outside the range of representable values of type float' undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033126)
- CVE-2017-7597: tif_dirread.c had an 'outside the range of representable values of type float' undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033120)
- CVE-2017-7599: LibTIFF had an 'outside the range of representable values of type short' undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033113)
- CVE-2017-7600: LibTIFF had an 'outside the range of representable values of type unsigned char' undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033112)
- CVE-2017-7601: LibTIFF had a 'shift exponent too large for 64-bit type long' undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033111)
- CVE-2017-7602: LibTIFF had a signed integer overflow, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033109)
- Multiple divide by zero issues
- CVE-2016-5314: Buffer overflow in the PixarLogDecode function in tif_pixarlog.c allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr. (bsc#987351 bsc#984808 bsc#984831)
Patchnames: sdksp4-tiff-13631,slessp4-tiff-13631
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
7.3 (High)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2016-10267
Threats
Impact
moderate
References
80 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tiff",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for tiff fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-5315: The setByteArray function in tif_dir.c allowed remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. (bsc#984809)\n- CVE-2016-10267: LibTIFF allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8. (bsc#1017694)\n- CVE-2016-10269: LibTIFF allowed remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to \u0027READ of size 512\u0027 and libtiff/tif_unix.c:340:2. (bsc#1031254)\n- CVE-2016-10270: LibTIFF allowed remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to \u0027READ of size 8\u0027 and libtiff/tif_read.c:523:22. (bsc#1031250)\n- CVE-2017-18013: In LibTIFF, there was a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. (bsc#1074317)\n- CVE-2017-7593: tif_read.c did not ensure that tif_rawdata is properly initialized, which might have allowed remote attackers to obtain sensitive information from process memory via a crafted image. (bsc#1033129)\n- CVE-2017-7595: The JPEGSetupEncode function in tiff_jpeg.c allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. (bsc#1033127)\n- CVE-2017-7596: LibTIFF had an \u0027outside the range of representable values of type float\u0027 undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033126)\n- CVE-2017-7597: tif_dirread.c had an \u0027outside the range of representable values of type float\u0027 undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033120)\n- CVE-2017-7599: LibTIFF had an \u0027outside the range of representable values of type short\u0027 undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033113)\n- CVE-2017-7600: LibTIFF had an \u0027outside the range of representable values of type unsigned char\u0027 undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033112)\n- CVE-2017-7601: LibTIFF had a \u0027shift exponent too large for 64-bit type long\u0027 undefined behavior issue, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033111)\n- CVE-2017-7602: LibTIFF had a signed integer overflow, which might have allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. (bsc#1033109)\n- Multiple divide by zero issues\n- CVE-2016-5314: Buffer overflow in the PixarLogDecode function in tif_pixarlog.c allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr. (bsc#987351 bsc#984808 bsc#984831)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-tiff-13631,slessp4-tiff-13631",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1472-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1472-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181472-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1472-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html"
},
{
"category": "self",
"summary": "SUSE Bug 1017694",
"url": "https://bugzilla.suse.com/1017694"
},
{
"category": "self",
"summary": "SUSE Bug 1031250",
"url": "https://bugzilla.suse.com/1031250"
},
{
"category": "self",
"summary": "SUSE Bug 1031254",
"url": "https://bugzilla.suse.com/1031254"
},
{
"category": "self",
"summary": "SUSE Bug 1033109",
"url": "https://bugzilla.suse.com/1033109"
},
{
"category": "self",
"summary": "SUSE Bug 1033111",
"url": "https://bugzilla.suse.com/1033111"
},
{
"category": "self",
"summary": "SUSE Bug 1033112",
"url": "https://bugzilla.suse.com/1033112"
},
{
"category": "self",
"summary": "SUSE Bug 1033113",
"url": "https://bugzilla.suse.com/1033113"
},
{
"category": "self",
"summary": "SUSE Bug 1033120",
"url": "https://bugzilla.suse.com/1033120"
},
{
"category": "self",
"summary": "SUSE Bug 1033126",
"url": "https://bugzilla.suse.com/1033126"
},
{
"category": "self",
"summary": "SUSE Bug 1033127",
"url": "https://bugzilla.suse.com/1033127"
},
{
"category": "self",
"summary": "SUSE Bug 1033129",
"url": "https://bugzilla.suse.com/1033129"
},
{
"category": "self",
"summary": "SUSE Bug 1074317",
"url": "https://bugzilla.suse.com/1074317"
},
{
"category": "self",
"summary": "SUSE Bug 984808",
"url": "https://bugzilla.suse.com/984808"
},
{
"category": "self",
"summary": "SUSE Bug 984809",
"url": "https://bugzilla.suse.com/984809"
},
{
"category": "self",
"summary": "SUSE Bug 984831",
"url": "https://bugzilla.suse.com/984831"
},
{
"category": "self",
"summary": "SUSE Bug 987351",
"url": "https://bugzilla.suse.com/987351"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10267 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10267/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10269 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10270 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5314 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5315 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18013 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7593 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7596 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7597 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7599 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7600 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7601 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7602 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7602/"
}
],
"title": "Security update for tiff",
"tracking": {
"current_release_date": "2026-09-20T12:46:44Z",
"generator": {
"date": "2018-05-30T07:08:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1472-1",
"initial_release_date": "2018-05-30T07:08:57Z",
"revision_history": [
{
"date": "2018-05-30T07:08:57Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T12:46:44Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"product": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"product_id": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel@3.8.2-141.169.6.1?arch=i586\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-0:3.8.2-141.169.6.1.i586",
"product": {
"name": "libtiff3-0:3.8.2-141.169.6.1.i586",
"product_id": "libtiff3-0:3.8.2-141.169.6.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3@3.8.2-141.169.6.1?arch=i586\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "tiff-0:3.8.2-141.169.6.1.i586",
"product": {
"name": "tiff-0:3.8.2-141.169.6.1.i586",
"product_id": "tiff-0:3.8.2-141.169.6.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/tiff@3.8.2-141.169.6.1?arch=i586\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"product": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"product_id": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel@3.8.2-141.169.6.1?arch=ia64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-0:3.8.2-141.169.6.1.ia64",
"product": {
"name": "libtiff3-0:3.8.2-141.169.6.1.ia64",
"product_id": "libtiff3-0:3.8.2-141.169.6.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3@3.8.2-141.169.6.1?arch=ia64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-x86-0:3.8.2-141.169.6.1.ia64",
"product": {
"name": "libtiff3-x86-0:3.8.2-141.169.6.1.ia64",
"product_id": "libtiff3-x86-0:3.8.2-141.169.6.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3-x86@3.8.2-141.169.6.1?arch=ia64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "tiff-0:3.8.2-141.169.6.1.ia64",
"product": {
"name": "tiff-0:3.8.2-141.169.6.1.ia64",
"product_id": "tiff-0:3.8.2-141.169.6.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/tiff@3.8.2-141.169.6.1?arch=ia64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"product": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"product_id": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel@3.8.2-141.169.6.1?arch=ppc64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"product": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"product_id": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel-32bit@3.8.2-141.169.6.1?arch=ppc64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-0:3.8.2-141.169.6.1.ppc64",
"product": {
"name": "libtiff3-0:3.8.2-141.169.6.1.ppc64",
"product_id": "libtiff3-0:3.8.2-141.169.6.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3@3.8.2-141.169.6.1?arch=ppc64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-32bit-0:3.8.2-141.169.6.1.ppc64",
"product": {
"name": "libtiff3-32bit-0:3.8.2-141.169.6.1.ppc64",
"product_id": "libtiff3-32bit-0:3.8.2-141.169.6.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3-32bit@3.8.2-141.169.6.1?arch=ppc64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "tiff-0:3.8.2-141.169.6.1.ppc64",
"product": {
"name": "tiff-0:3.8.2-141.169.6.1.ppc64",
"product_id": "tiff-0:3.8.2-141.169.6.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/tiff@3.8.2-141.169.6.1?arch=ppc64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"product": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"product_id": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel@3.8.2-141.169.6.1?arch=s390x\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"product": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"product_id": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel-32bit@3.8.2-141.169.6.1?arch=s390x\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-0:3.8.2-141.169.6.1.s390x",
"product": {
"name": "libtiff3-0:3.8.2-141.169.6.1.s390x",
"product_id": "libtiff3-0:3.8.2-141.169.6.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3@3.8.2-141.169.6.1?arch=s390x\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-32bit-0:3.8.2-141.169.6.1.s390x",
"product": {
"name": "libtiff3-32bit-0:3.8.2-141.169.6.1.s390x",
"product_id": "libtiff3-32bit-0:3.8.2-141.169.6.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3-32bit@3.8.2-141.169.6.1?arch=s390x\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "tiff-0:3.8.2-141.169.6.1.s390x",
"product": {
"name": "tiff-0:3.8.2-141.169.6.1.s390x",
"product_id": "tiff-0:3.8.2-141.169.6.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/tiff@3.8.2-141.169.6.1?arch=s390x\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"product": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"product_id": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel@3.8.2-141.169.6.1?arch=x86_64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"product": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"product_id": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff-devel-32bit@3.8.2-141.169.6.1?arch=x86_64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-0:3.8.2-141.169.6.1.x86_64",
"product": {
"name": "libtiff3-0:3.8.2-141.169.6.1.x86_64",
"product_id": "libtiff3-0:3.8.2-141.169.6.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3@3.8.2-141.169.6.1?arch=x86_64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libtiff3-32bit-0:3.8.2-141.169.6.1.x86_64",
"product": {
"name": "libtiff3-32bit-0:3.8.2-141.169.6.1.x86_64",
"product_id": "libtiff3-32bit-0:3.8.2-141.169.6.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libtiff3-32bit@3.8.2-141.169.6.1?arch=x86_64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "tiff-0:3.8.2-141.169.6.1.x86_64",
"product": {
"name": "tiff-0:3.8.2-141.169.6.1.x86_64",
"product_id": "tiff-0:3.8.2-141.169.6.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/tiff@3.8.2-141.169.6.1?arch=x86_64\u0026upstream=tiff-0:3.8.2-141.169.6.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sled:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
},
"product_reference": "libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10267",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10267"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10267",
"url": "https://www.suse.com/security/cve/CVE-2016-10267"
},
{
"category": "external",
"summary": "SUSE Bug 1017694 for CVE-2016-10267",
"url": "https://bugzilla.suse.com/1017694"
},
{
"category": "external",
"summary": "SUSE Bug 1031262 for CVE-2016-10267",
"url": "https://bugzilla.suse.com/1031262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2016-10267"
},
{
"cve": "CVE-2016-10269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10269"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to \"READ of size 512\" and libtiff/tif_unix.c:340:2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10269",
"url": "https://www.suse.com/security/cve/CVE-2016-10269"
},
{
"category": "external",
"summary": "SUSE Bug 1017693 for CVE-2016-10269",
"url": "https://bugzilla.suse.com/1017693"
},
{
"category": "external",
"summary": "SUSE Bug 1031254 for CVE-2016-10269",
"url": "https://bugzilla.suse.com/1031254"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2016-10269"
},
{
"cve": "CVE-2016-10270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10270"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to \"READ of size 8\" and libtiff/tif_read.c:523:22.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10270",
"url": "https://www.suse.com/security/cve/CVE-2016-10270"
},
{
"category": "external",
"summary": "SUSE Bug 1031250 for CVE-2016-10270",
"url": "https://bugzilla.suse.com/1031250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2016-10270"
},
{
"cve": "CVE-2016-5314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5314"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5314",
"url": "https://www.suse.com/security/cve/CVE-2016-5314"
},
{
"category": "external",
"summary": "SUSE Bug 984831 for CVE-2016-5314",
"url": "https://bugzilla.suse.com/984831"
},
{
"category": "external",
"summary": "SUSE Bug 987351 for CVE-2016-5314",
"url": "https://bugzilla.suse.com/987351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2016-5314"
},
{
"cve": "CVE-2016-5315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5315"
}
],
"notes": [
{
"category": "general",
"text": "The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5315",
"url": "https://www.suse.com/security/cve/CVE-2016-5315"
},
{
"category": "external",
"summary": "SUSE Bug 984809 for CVE-2016-5315",
"url": "https://bugzilla.suse.com/984809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2016-5315"
},
{
"cve": "CVE-2017-18013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18013"
}
],
"notes": [
{
"category": "general",
"text": "In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18013",
"url": "https://www.suse.com/security/cve/CVE-2017-18013"
},
{
"category": "external",
"summary": "SUSE Bug 1074317 for CVE-2017-18013",
"url": "https://bugzilla.suse.com/1074317"
},
{
"category": "external",
"summary": "SUSE Bug 1082825 for CVE-2017-18013",
"url": "https://bugzilla.suse.com/1082825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-18013"
},
{
"cve": "CVE-2017-7593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7593"
}
],
"notes": [
{
"category": "general",
"text": "tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7593",
"url": "https://www.suse.com/security/cve/CVE-2017-7593"
},
{
"category": "external",
"summary": "SUSE Bug 1033129 for CVE-2017-7593",
"url": "https://bugzilla.suse.com/1033129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7593"
},
{
"cve": "CVE-2017-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7595"
}
],
"notes": [
{
"category": "general",
"text": "The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7595",
"url": "https://www.suse.com/security/cve/CVE-2017-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1033111 for CVE-2017-7595",
"url": "https://bugzilla.suse.com/1033111"
},
{
"category": "external",
"summary": "SUSE Bug 1033127 for CVE-2017-7595",
"url": "https://bugzilla.suse.com/1033127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7595"
},
{
"cve": "CVE-2017-7596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7596"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7596",
"url": "https://www.suse.com/security/cve/CVE-2017-7596"
},
{
"category": "external",
"summary": "SUSE Bug 1033112 for CVE-2017-7596",
"url": "https://bugzilla.suse.com/1033112"
},
{
"category": "external",
"summary": "SUSE Bug 1033113 for CVE-2017-7596",
"url": "https://bugzilla.suse.com/1033113"
},
{
"category": "external",
"summary": "SUSE Bug 1033120 for CVE-2017-7596",
"url": "https://bugzilla.suse.com/1033120"
},
{
"category": "external",
"summary": "SUSE Bug 1033126 for CVE-2017-7596",
"url": "https://bugzilla.suse.com/1033126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7596"
},
{
"cve": "CVE-2017-7597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7597"
}
],
"notes": [
{
"category": "general",
"text": "tif_dirread.c in LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7597",
"url": "https://www.suse.com/security/cve/CVE-2017-7597"
},
{
"category": "external",
"summary": "SUSE Bug 1033112 for CVE-2017-7597",
"url": "https://bugzilla.suse.com/1033112"
},
{
"category": "external",
"summary": "SUSE Bug 1033113 for CVE-2017-7597",
"url": "https://bugzilla.suse.com/1033113"
},
{
"category": "external",
"summary": "SUSE Bug 1033120 for CVE-2017-7597",
"url": "https://bugzilla.suse.com/1033120"
},
{
"category": "external",
"summary": "SUSE Bug 1033126 for CVE-2017-7597",
"url": "https://bugzilla.suse.com/1033126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7597"
},
{
"cve": "CVE-2017-7599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7599"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 has an \"outside the range of representable values of type short\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7599",
"url": "https://www.suse.com/security/cve/CVE-2017-7599"
},
{
"category": "external",
"summary": "SUSE Bug 1033112 for CVE-2017-7599",
"url": "https://bugzilla.suse.com/1033112"
},
{
"category": "external",
"summary": "SUSE Bug 1033113 for CVE-2017-7599",
"url": "https://bugzilla.suse.com/1033113"
},
{
"category": "external",
"summary": "SUSE Bug 1033120 for CVE-2017-7599",
"url": "https://bugzilla.suse.com/1033120"
},
{
"category": "external",
"summary": "SUSE Bug 1033126 for CVE-2017-7599",
"url": "https://bugzilla.suse.com/1033126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7599"
},
{
"cve": "CVE-2017-7600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7600"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7600",
"url": "https://www.suse.com/security/cve/CVE-2017-7600"
},
{
"category": "external",
"summary": "SUSE Bug 1033112 for CVE-2017-7600",
"url": "https://bugzilla.suse.com/1033112"
},
{
"category": "external",
"summary": "SUSE Bug 1033113 for CVE-2017-7600",
"url": "https://bugzilla.suse.com/1033113"
},
{
"category": "external",
"summary": "SUSE Bug 1033120 for CVE-2017-7600",
"url": "https://bugzilla.suse.com/1033120"
},
{
"category": "external",
"summary": "SUSE Bug 1033126 for CVE-2017-7600",
"url": "https://bugzilla.suse.com/1033126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7600"
},
{
"cve": "CVE-2017-7601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7601"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 has a \"shift exponent too large for 64-bit type long\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7601",
"url": "https://www.suse.com/security/cve/CVE-2017-7601"
},
{
"category": "external",
"summary": "SUSE Bug 1033111 for CVE-2017-7601",
"url": "https://bugzilla.suse.com/1033111"
},
{
"category": "external",
"summary": "SUSE Bug 1033127 for CVE-2017-7601",
"url": "https://bugzilla.suse.com/1033127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7601"
},
{
"cve": "CVE-2017-7602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7602"
}
],
"notes": [
{
"category": "general",
"text": "LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7602",
"url": "https://www.suse.com/security/cve/CVE-2017-7602"
},
{
"category": "external",
"summary": "SUSE Bug 1033109 for CVE-2017-7602",
"url": "https://bugzilla.suse.com/1033109"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Desktop 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-0:3.8.2-141.169.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-0:3.8.2-141.169.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-30T07:08:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-7602"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.