Wind River Support Network

HomeDefectsLIN7-5654

Fixed

LIN7-5654 : Security Advisory - libtiff - CVE-2014-8128

Created: Feb 17, 2016 Updated: Sep 8, 2018

Resolved Date: Feb 17, 2016

Found In Version: 7.0

Fix Version: 7.0.0.26

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

Multiple out-of-bounds writes were reported in various libtiff tools:

- CVE-2014-8128 libtiff: Out-of-bounds Write in the thumbnail tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2489
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiffdither tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2490
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiffdither tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2491
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiffdither tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2492
- CVE-2014-8128 libtiff: Out-of-bounds Write in the thumbnail and tiffcmp tools
  http://bugzilla.maptools.org/show_bug.cgi?id=2493
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiff2pdf tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2495

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8128

Other Downloads

CVEs

CVE-2014-8128