Vulnerability Name:

CVE-2016-9540 (CCN-119237)

Assigned:2016-10-08
Published:2016-10-08
Updated:2018-01-05
Summary:tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."
CVSS v3 Severity:9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
6.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
5.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
7.0 High (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
6.1 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
5.1 Medium (REDHAT CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-787
CWE-119
CWE-122
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2016-9540

Source: CCN
Type: RHSA-2017-0225
Moderate: libtiff security update

Source: REDHAT
Type: UNKNOWN
RHSA-2017:0225

Source: DEBIAN
Type: UNKNOWN
DSA-3762

Source: CCN
Type: IBM Security Bulletin 874884 (Dynamic System Analysis (DSA) Preboot)
IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libTIFF

Source: BID
Type: Third Party Advisory, VDB Entry
94484

Source: CCN
Type: BID-94484
RETIRED: LibTIFF Multiple Security Vulnerabilites

Source: BID
Type: UNKNOWN
94747

Source: CCN
Type: BID-94747
LibTIFF CVE-2016-9540 Heap Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
libtiff-cve20169540-bo(119237)

Source: CCN
Type: LibTIFF GIT Repository
tools/tiffcp.c: fix out-of-bounds write on tiled images with odd

Source: CONFIRM
Type: Issue Tracking, Patch, Third Party Advisory
https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3

Source: CCN
Type: Apple security document HT207615
About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-9540

Vulnerable Configuration:Configuration 1:
  • cpe:/a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:7::computenode:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

    • Configuration RedHat 10:
  • cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*
  • AND
  • cpe:/o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_hpc_node:7:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_workstation:7:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server:6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_workstation:6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20169540
    V
    		CVE-2016-9540
    2022-05-20
    oval:org.opensuse.security:def:29497
    P
    		Security update for apache2 (Important)
    2022-01-12
    oval:org.opensuse.security:def:35282
    P
    		Security update for gegl (Important)
    2021-12-28
    oval:org.opensuse.security:def:31336
    P
    		Security update for chrony (Moderate)
    2021-12-22
    oval:org.opensuse.security:def:30285
    P
    		Security update for xorg-x11-server (Important)
    2021-12-20
    oval:org.opensuse.security:def:34592
    P
    		Security update for the Linux Kernel (Important)
    2021-11-19
    oval:org.opensuse.security:def:29443
    P
    		Security update for pcre (Moderate)
    2021-11-10
    oval:org.opensuse.security:def:31702
    P
    		Security update for qemu (Important)
    2021-11-10
    oval:org.opensuse.security:def:31249
    P
    		Security update for python-PyYAML (Important)
    2021-08-24
    oval:org.opensuse.security:def:30117
    P
    		Security update for openssl (Important)
    2021-08-24
    oval:org.opensuse.security:def:34502
    P
    		Security update for the Linux Kernel (Important)
    2021-08-10
    oval:org.opensuse.security:def:33696
    P
    		Security update for mariadb (Important)
    2021-08-06
    oval:org.opensuse.security:def:31658
    P
    		Security update for the Linux Kernel (Important)
    2021-07-22
    oval:org.opensuse.security:def:30106
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:30105
    P
    		Security update for qemu (Moderate)
    2021-07-21
    oval:org.opensuse.security:def:32951
    P
    		Security update for xterm (Important)
    2021-06-18
    oval:org.opensuse.security:def:31192
    P
    		Security update for MozillaFirefox (Important)
    2021-06-08
    oval:org.opensuse.security:def:36431
    P
    		libQtWebKit-devel-4.6.3-5.34.2 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36389
    P
    		dbus-1-devel-1.2.10-3.31.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:31636
    P
    		Security update for spice (Important)
    2021-06-08
    oval:org.opensuse.security:def:33652
    P
    		Security update for libxml2 (Important)
    2021-05-19
    oval:org.opensuse.security:def:30191
    P
    		Security update for cups (Important)
    2021-04-30
    oval:org.opensuse.security:def:33086
    P
    		Security update for ImageMagick (Moderate)
    2021-02-25
    oval:org.opensuse.security:def:28931
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP2) (Important)
    2021-02-10
    oval:org.opensuse.security:def:34445
    P
    		Security update for dovecot22 (Important)
    2021-01-04
    oval:org.opensuse.security:def:31100
    P
    		Security update for cyrus-sasl (Important)
    2020-12-28
    oval:org.opensuse.security:def:33628
    P
    		Security update for cyrus-sasl (Important)
    2020-12-28
    oval:org.opensuse.security:def:34334
    P
    		Security update for python (Important)
    2020-12-11
    oval:org.opensuse.security:def:28862
    P
    		Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP2) (Important)
    2020-12-07
    oval:org.opensuse.security:def:35646
    P
    		unzip-5.52-142.23.43 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35605
    P
    		libtiff3-3.8.2-141.8.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35751
    P
    		libicu-32bit-4.0-7.26.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35707
    P
    		glib2-2.22.5-0.2.23 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35679
    P
    		cron-4.1-194.199.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35640
    P
    		sudo-1.6.9p17-21.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35591
    P
    		libmysqlclient15-32bit-5.0.67-13.20.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35532
    P
    		cron-4.1-194.24.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:34893
    P
    		Security update for curl
    2020-12-01
    oval:org.opensuse.security:def:27684
    P
    		Security update for xorg-x11-server
    2020-12-01
    oval:org.opensuse.security:def:34374
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34892
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27645
    P
    		Security update for libvirt
    2020-12-01
    oval:org.opensuse.security:def:27596
    P
    		Security update for Mesa
    2020-12-01
    oval:org.opensuse.security:def:30968
    P
    		Security update for gstreamer-0_10-plugins-base (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27543
    P
    		python-crypto on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30894
    P
    		Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)
    2020-12-01
    oval:org.opensuse.security:def:27392
    P
    		emacs-nox on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30883
    P
    		Security update for Mozilla Firefox
    2020-12-01
    oval:org.opensuse.security:def:27308
    P
    		tftp on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33589
    P
    		Security update for MozillaFirefox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30322
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30882
    P
    		Security update for Mozilla Firefox
    2020-12-01
    oval:org.opensuse.security:def:27251
    P
    		openCryptoki on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33540
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:27170
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33483
    P
    		Security update for OpenSSL
    2020-12-01
    oval:org.opensuse.security:def:29647
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27042
    P
    		taglib on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33326
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29603
    P
    		Security update for axis (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26978
    P
    		libvirt on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33238
    P
    		procmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29585
    P
    		Security update for apache2-mod_jk (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26967
    P
    		libpython2_6-1_0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33181
    P
    		libsnmp15-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29546
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26966
    P
    		libpulse-browse0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34967
    P
    		Security update for gcc43 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34923
    P
    		Security update for exempi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32872
    P
    		gnome-screensaver on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29290
    P
    		Security update for Linux kernel
    2020-12-01
    oval:org.opensuse.security:def:34897
    P
    		Security update for dbus-1
    2020-12-01
    oval:org.opensuse.security:def:32861
    P
    		foomatic-filters on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29205
    P
    		Security update for openssl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34858
    P
    		Security update for clamav (Important)
    2020-12-01
    oval:org.opensuse.security:def:31594
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32860
    P
    		findutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29148
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:34809
    P
    		Security update for apache2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31556
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:29062
    P
    		Security update for bsdtar (Important)
    2020-12-01
    oval:org.opensuse.security:def:34751
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:30918
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30874
    P
    		Security update for expat (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30854
    P
    		Security update for dnsmasq (Important)
    2020-12-01
    oval:org.opensuse.security:def:28851
    P
    		Security update for Xen
    2020-12-01
    oval:org.opensuse.security:def:30815
    P
    		Security update for coreutils (Important)
    2020-12-01
    oval:org.opensuse.security:def:28850
    P
    		Security update for Xen
    2020-12-01
    oval:org.opensuse.security:def:34347
    P
    		Security update for squidGuard (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30766
    P
    		Security update for aspell (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34211
    P
    		Security update for php5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:30711
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:34127
    P
    		Security update for mozilla-nspr, mozilla-nss
    2020-12-01
    oval:org.opensuse.security:def:30556
    P
    		Security update for mozilla-nss
    2020-12-01
    oval:org.opensuse.security:def:34116
    P
    		Security update for nautilus (Low)
    2020-12-01
    oval:org.opensuse.security:def:30469
    P
    		Security update for PHP5
    2020-12-01
    oval:org.opensuse.security:def:32379
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34115
    P
    		Security update for nagios-nrpe (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30412
    P
    		Security update for xorg-x11-libX11 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32340
    P
    		Security update for socat (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30323
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35372
    P
    		Security update for netpbm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35225
    P
    		Security update for liblouis (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31597
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28415
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35124
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31548
    P
    		Security update for sblim-sfcb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28380
    P
    		Security update for rubygem-actionpack-3_2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34988
    P
    		Security update for glib2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31492
    P
    		Security update for Python
    2020-12-01
    oval:org.opensuse.security:def:27742
    P
    		Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)
    2020-12-01
    oval:org.opensuse.security:def:34904
    P
    		Security update for djvulibre (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27698
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.cisecurity:def:1756
    P
    		DSA-3762-1 -- tiff -- security update
    2017-02-24
    oval:com.redhat.rhsa:def:20170225
    P
    		RHSA-2017:0225: libtiff security update (Moderate)
    2017-02-01
    oval:com.ubuntu.xenial:def:201695400000000
    V
    		CVE-2016-9540 on Ubuntu 16.04 LTS (xenial) - low.
    2016-11-22
    oval:com.ubuntu.xenial:def:20169540000
    V
    		CVE-2016-9540 on Ubuntu 16.04 LTS (xenial) - low.
    2016-11-22
    oval:com.ubuntu.artful:def:20169540000
    V
    		CVE-2016-9540 on Ubuntu 17.10 (artful) - low.
    2016-11-22
    oval:com.ubuntu.precise:def:20169540000
    V
    		CVE-2016-9540 on Ubuntu 12.04 LTS (precise) - low.
    2016-11-22
    oval:com.ubuntu.trusty:def:20169540000
    V
    		CVE-2016-9540 on Ubuntu 14.04 LTS (trusty) - low.
    2016-11-22
    BACK
    libtiff libtiff 4.0.6
    libtiff libtiff 4.0.6
    redhat enterprise linux desktop 7
    redhat enterprise linux hpc node 7
    redhat enterprise linux server 7
    redhat enterprise linux workstation 7
    redhat enterprise linux desktop 6
    redhat enterprise linux hpc node 6
    redhat enterprise linux server 6
    redhat enterprise linux workstation 6
    redhat enterprise linux server tus 7.3