Wind River Support Network

HomeDefectsLIN8-2783

Fixed

LIN8-2783 : Security Advisory - libtiff - CVE-2014-8128

Created: Feb 17, 2016 Updated: Dec 3, 2018

Resolved Date: Jun 6, 2017

Found In Version: 8.0

Fix Version: 8.0.0.19

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

Multiple out-of-bounds writes were reported in various libtiff tools:

- CVE-2014-8128 libtiff: Out-of-bounds Write in the thumbnail tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2489
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiffdither tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2490
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiffdither tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2491
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiffdither tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2492
- CVE-2014-8128 libtiff: Out-of-bounds Write in the thumbnail and tiffcmp tools
  http://bugzilla.maptools.org/show_bug.cgi?id=2493
- CVE-2014-8128 libtiff: Out-of-bounds Write in the tiff2pdf tool
  http://bugzilla.maptools.org/show_bug.cgi?id=2495

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8128

Other Downloads

CVEs

CVE-2014-8128