Vulnerability CVE-2011-0191 - CERT Civis.Net

Vulnerability Name:

CVE-2011-0191 (CCN-65794)

Assigned:

2010-12-23

Published:

2011-03-02

Updated:

2014-02-21

Summary:

Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2011-0191

Source: APPLE
Type: UNKNOWN
APPLE-SA-2011-03-09-1

Source: APPLE
Type: UNKNOWN
APPLE-SA-2011-03-09-2

Source: APPLE
Type: UNKNOWN
APPLE-SA-2011-03-09-3

Source: APPLE
Type: Patch, Vendor Advisory
APPLE-SA-2011-03-02-1

Source: APPLE
Type: UNKNOWN
APPLE-SA-2011-03-21-1

Source: SUSE
Type: UNKNOWN
SUSE-SR:2011:005

Source: SUSE
Type: UNKNOWN
SUSE-SR:2011:009

Source: CCN
Type: SA43582
Apple iTunes Multiple Vulnerabilities

Source: CCN
Type: SA43696
Apple Safari Multiple Vulnerabilities

Source: CCN
Type: SA43697
Apple TV Multiple Vulnerabilities

Source: CCN
Type: SA43698
Apple iOS Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
43934

Source: CCN
Type: Apple Web site
About the security content of iTunes 10.3

Source: CONFIRM
Type: Vendor Advisory
http://support.apple.com/kb/HT4554

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT4564

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT4565

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT4566

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT4581

Source: DEBIAN
Type: UNKNOWN
DSA-2210

Source: DEBIAN
Type: DSA-2210
tiff -- several vulnerabilities

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2011:064

Source: CCN
Type: OSVDB ID: 71519
Apple ImageIO / Apple TV Library JPEG-Encoded TIFF Image Handling Overflow

Source: BID
Type: UNKNOWN
46657

Source: CCN
Type: BID-46657
libTIFF TIFF Image Buffer Overflow Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2011-0845

Source: VUPEN
Type: UNKNOWN
ADV-2011-0859

Source: XF
Type: UNKNOWN
itunes-imageio-libtiff-code-execution(65794)

Source: SUSE
Type: SUSE-SA:2011:019
Linux kernel security update

Source: SUSE
Type: SUSE-SA:2011:020
Linux kernel security update

Source: SUSE
Type: SUSE-SA:2011:027
Linux kernel security update

Source: SUSE
Type: SUSE-SR:2011:005
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2011:009
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:apple:itunes:4.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.1.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.2.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.5:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.5.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.6:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.6.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.7:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.7.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.7.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.7.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.8.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:4.9.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:5.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:5.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.2.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.3.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.3.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.3.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.4:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.4.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.4.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.4.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.4.3:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.5:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.5.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.6:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.6.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.6.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.6.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.7:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.7.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:7.7.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:8.2.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:9.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:9.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:9.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:9.0.3:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:9.2:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:9.2.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:10.0:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:10.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:10.1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:itunes:*:*:*:*:*:*:*:* (Version <= 10.1.2)

AND

cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_7:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:-:ipodtouch:*:*:*:*:*

OR cpe:/a:apple:itunes:10.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.6:*:*:*:*:*:*:*

AND

cpe:/o:novell:suse_linux_enterprise_server:10:sp2:itanium_ia64:*:*:*:*:*

OR cpe:/o:apple:tvos:4.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20110191	V	CVE-2011-0191	2022-05-20
oval:org.opensuse.security:def:42383	P	Security update for the Linux Kernel (Important)	2022-05-16
oval:org.opensuse.security:def:42178	P	Security update for permissions (Moderate)	2022-01-20
oval:org.opensuse.security:def:31753	P	Security update for net-snmp (Important)	2022-01-05
oval:org.opensuse.security:def:31324	P	Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) (Important)	2021-12-14
oval:org.opensuse.security:def:32219	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:31702	P	Security update for qemu (Important)	2021-11-10
oval:org.opensuse.security:def:26156	P	Security update for open-lldp (Moderate)	2021-10-26
oval:org.opensuse.security:def:31691	P	Security update for apache2 (Important)	2021-10-06
oval:org.opensuse.security:def:31690	P	Security update for webkit2gtk3 (Important)	2021-10-06
oval:org.opensuse.security:def:32197	P	Security update for glibc (Moderate)	2021-10-06
oval:org.opensuse.security:def:26119	P	Security update for file (Important)	2021-09-02
oval:org.opensuse.security:def:26115	P	Security update for libesmtp (Important)	2021-09-02
oval:org.opensuse.security:def:31250	P	Security update for openssl (Important)	2021-08-24
oval:org.opensuse.security:def:26103	P	Security update for the Linux Kernel (Important)	2021-08-10
oval:org.opensuse.security:def:31661	P	Security update for webkit2gtk3 (Important)	2021-08-03
oval:org.opensuse.security:def:26097	P	Security update for lasso (Important)	2021-08-02
oval:org.opensuse.security:def:31239	P	Security update for dbus-1 (Important)	2021-08-02
oval:org.opensuse.security:def:32158	P	Security update for dbus-1 (Important)	2021-08-02
oval:org.opensuse.security:def:31238	P	Security update for qemu (Important)	2021-07-29
oval:org.opensuse.security:def:32144	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-07-21
oval:org.opensuse.security:def:36224	P	libtiff3-3.8.2-141.154.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42631	P	libtiff3-3.8.2-141.154.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36494	P	libtiff-devel-3.8.2-141.154.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32109	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-06-04
oval:org.opensuse.security:def:26058	P	Security update for postgresql10 (Moderate)	2021-05-27
oval:org.opensuse.security:def:26055	P	Security update for hivex (Moderate)	2021-05-26
oval:org.opensuse.security:def:26053	P	Security update for libxml2 (Important)	2021-05-19
oval:org.opensuse.security:def:26044	P	Security update for avahi (Moderate)	2021-05-04
oval:org.opensuse.security:def:26043	P	Security update for bind (Important)	2021-05-04
oval:org.opensuse.security:def:26039	P	Security update for libnettle (Important)	2021-04-28
oval:org.opensuse.security:def:32901	P	Security update for ImageMagick (Moderate)	2021-04-20
oval:org.opensuse.security:def:31605	P	Security update for xorg-x11-server (Important)	2021-04-14
oval:org.opensuse.security:def:26205	P	Security update for openssl-1_0_0 (Moderate)	2021-03-08
oval:org.opensuse.security:def:32263	P	Security update for java-1_8_0-ibm (Important)	2021-02-26
oval:org.opensuse.security:def:26199	P	Security update for ImageMagick (Moderate)	2021-02-25
oval:org.opensuse.security:def:31692	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:32940	P	Security update for java-1_7_1-ibm (Moderate)	2021-01-04
oval:org.opensuse.security:def:25977	P	Security update for openssl-1_1 (Important)	2020-12-10
oval:org.opensuse.security:def:35771	P	libtiff3-3.8.2-141.142.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35976	P	libtiff3-3.8.2-141.152.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:32000	P	Security update for python-setuptools (Important)	2020-12-02
oval:org.opensuse.security:def:25785	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:32057	P	Security update for kvm (Moderate)	2020-12-01
oval:org.opensuse.security:def:26761	P	libpulse-browse0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25774	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26722	P	kbd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26770	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25773	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:31908	P	Security update for freetype2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26673	P	bind on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26735	P	libMagickCore1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31776	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26620	P	openssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26469	P	Security update for phpMyAdmin (Important)	2020-12-01
oval:org.opensuse.security:def:26385	P	Security update for go (Moderate)	2020-12-01
oval:org.opensuse.security:def:32735	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26328	P	used on wotan :) (Low)	2020-12-01
oval:org.opensuse.security:def:26000	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:32696	P	krb5-plugin-kdb-ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26247	P	Security update for bluez (Moderate)	2020-12-01
oval:org.opensuse.security:def:25951	P	Security update for pcsc-lite (Moderate)	2020-12-01
oval:org.opensuse.security:def:32058	P	Security update for kvm (Moderate)	2020-12-01
oval:org.opensuse.security:def:25898	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:32014	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25747	P	Security update for git (Important)	2020-12-01
oval:org.opensuse.security:def:31992	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:25663	P	Security update for java-11-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:31953	P	Security update for gstreamer-0_10-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:26975	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25606	P	Security update for libjpeg-turbo (Moderate)	2020-12-01
oval:org.opensuse.security:def:31904	P	Security update for foomatic-filters (Moderate)	2020-12-01
oval:org.opensuse.security:def:26940	P	libapr-util1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25525	P	Security update for ruby2.1 (Important)	2020-12-01
oval:org.opensuse.security:def:31848	P	Security update for clamav (Moderate)	2020-12-01
oval:org.opensuse.security:def:26302	P	Security update for python-PyYAML (Moderate)	2020-12-01
oval:org.opensuse.security:def:25397	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:26258	P	Security update for openconnect (Moderate)	2020-12-01
oval:org.opensuse.security:def:25333	P	Security update for apache-commons-httpclient (Important)	2020-12-01
oval:org.opensuse.security:def:26244	P	Security update for openconnect (Moderate)	2020-12-01
oval:org.opensuse.security:def:25322	P	Security update for tigervnc (Critical)	2020-12-01
oval:org.opensuse.security:def:31548	P	Security update for sblim-sfcb (Moderate)	2020-12-01
oval:org.opensuse.security:def:25321	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:31456	P	Security update for postgresql91	2020-12-01
oval:org.opensuse.security:def:25952	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25868	P	Security update for pcre (Moderate)	2020-12-01
oval:org.opensuse.security:def:27222	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25811	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:27187	P	libgdiplus0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25730	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:32053	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:26549	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25602	P	Security update for java-1_7_1-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:31897	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:26505	P	Security update for phpMyAdmin (Moderate)	2020-12-01
oval:org.opensuse.security:def:25538	P	Security update for perl (Important)	2020-12-01
oval:org.opensuse.security:def:31810	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26491	P	Security update for nextcloud (Moderate)	2020-12-01
oval:org.opensuse.security:def:33187	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25527	P	Security update for java-11-openjdk (Moderate)	2020-12-01
oval:org.opensuse.security:def:26452	P	Security update for phpMyAdmin (Moderate)	2020-12-01
oval:org.opensuse.security:def:33148	P	libexiv2-4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25526	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:26403	P	Security update for ffmpeg (Moderate)	2020-12-01
oval:org.opensuse.security:def:32510	P	file-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31529	P	Security update for rzsz (Moderate)	2020-12-01
oval:org.opensuse.security:def:26350	P	Security update for ansible (Moderate)	2020-12-01
oval:org.opensuse.security:def:32466	P	Security update for xorg-x11-libs (Moderate)	2020-12-01
oval:org.opensuse.security:def:31455	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:32444	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:31444	P	Security update for poppler (Moderate)	2020-12-01
oval:org.opensuse.security:def:32405	P	Security update for wavpack (Moderate)	2020-12-01
oval:org.opensuse.security:def:27492	P	libtiff-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31443	P	Security update for policycoreutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:32356	P	Security update for squid3 (Important)	2020-12-01
oval:org.opensuse.security:def:27457	P	liblcms-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32300	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:26819	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25849	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:26775	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.mitre.oval:def:13302	P	USN-1085-1 -- tiff vulnerabilities	2014-06-30
oval:org.mitre.oval:def:13452	P	USN-1085-2 -- tiff regression	2014-06-30
oval:org.mitre.oval:def:12967	P	DSA-2210-2 tiff -- several	2014-06-23
oval:org.mitre.oval:def:13020	P	DSA-2210-1 tiff -- several	2014-06-23