Every CVESearch/Get API key

CVE-2016-5875

The updated packages fix libtiff security vulnerabilities

No scoreFix availableRejected

CVE-2016-5875 has been rejected by its source and should not be treated as a live vulnerability, published June 30, 2016. Fixed in tiff 4.0.7-r0.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.0.7-r0tiff +24 more

Description

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Affected packages

Affected packages
PackageAffectedFixed
tiff
Alpine:v3.2
before 4.0.7-r0
4.0.7-r0
tiff
Alpine:v3.3
before 4.0.7-r0
4.0.7-r0
tiff
Alpine:v3.4
before 4.0.7-r0
4.0.7-r0
libtiff
Mageia:5
From an advisory covering 19 CVEs
before 4.0.6-1.4.mga5
4.0.6-1.4.mga5
tiff
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 9 CVEs
before 4.0.6-26.3
4.0.6-26.3
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 9 CVEs
before 4.0.6-26.3
4.0.6-26.3
tiff
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 9 CVEs
before 4.0.6-26.3
4.0.6-26.3
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 9 CVEs
before 4.0.6-26.3
4.0.6-26.3
tiff
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 10 CVEs
before 3.8.2-141.168.1
3.8.2-141.168.1
tiff
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 10 CVEs
before 3.8.2-141.168.1
3.8.2-141.168.1
Show 15 moreShow less
Affected packages
PackageAffectedFixed
tiff
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 10 CVEs
before 3.8.2-141.168.1
3.8.2-141.168.1
tiff
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Desktop 12 SP2
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP2
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Server 12 SP2
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 11 CVEs
before 4.0.7-35.1
4.0.7-35.1
tiff
Ubuntu:14.04:LTS
before 4.0.3-7ubuntu0.6, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 4 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.4
4.0.3-7ubuntu0.6
tiff
Ubuntu:16.04:LTS
before 4.0.6-1ubuntu0.1, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-1
4.0.6-1ubuntu0.1
tiff
Ubuntu:14.04:LTS
From an advisory covering 39 CVEs
before 4.0.3-7ubuntu0.6, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 4 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.4
4.0.3-7ubuntu0.6
tiff
Ubuntu:16.04:LTS
From an advisory covering 39 CVEs
before 4.0.6-1ubuntu0.1, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-1
4.0.6-1ubuntu0.1
tiff
openSUSE:Tumbleweed
From an advisory covering 49 CVEs
before 4.0.7-1.1
4.0.7-1.1

What each source reports

CVE ListNo score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2016-5875
Updated
2026-11-02
EUVDEUVD-2016-6809No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
EUVD-2016-6809
Updated
2026-11-03
NVDNo score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2016-5875
Updated
2026-11-02
OSVALPINE-CVE-2016-5875No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
ALPINE-CVE-2016-5875
Updated
2026-11-02
OSVNo score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2016-5875
Updated
2026-11-02
OSVMGASA-2016-0349No score

The updated packages fix libtiff security vulnerabilities

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. (CVE-2015-7554)

Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image. (CVE-2015-8668)

Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file. (CVE-2016-3186) (the program gif2tiff has been obsoleted)

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image. (CVE-2016-3622)

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0. (CVE-2016-3623)

The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image. (CVE-2016-3632)

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled,allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write. (CVE-2016-3945)

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp. (CVE-2016-3990)

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles. (CVE-2016-3991)

PixarLogDecode() out-of-bound writes (CVE-2016-5314)

tif_dir.c: setByteArray() Read access violation (CVE-2016-5315)

tif_pixarlog.c: PixarLogCleanup() Segmentation fault (CVE-2016-5316)

crash occurs when generating a thumbnail for a crafted TIFF image (CVE-2016-5317)

rgb2ycbcr: command excution (CVE-2016-5320)

DumpModeDecode(): Ddos (CVE-2016-5321)

tiffcrop: extractContigSamplesBytes: out-of-bounds read (CVE-2016-5322)

tiffcrop _TIFFFax3fillruns(): divide by zero (CVE-2016-5323)

tiff: heap-based buffer overflow when using the PixarLog compression format (CVE-2016-5875)

tiff: information leak in libtiff/tif_read.c (CVE-2016-6223)

Record
MGASA-2016-0349
Updated
2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10554-1No score

libtiff-devel-32bit-4.0.7-1.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10554-1
Updated
2026-11-02
OSVSUSE-SU-2016:2271-1No score

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (bsc#964225)
  • CVE-2016-3186: Buffer overflow in gif2tiff (bnc#973340).
  • CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat (bsc#987351)
  • CVE-2016-5316: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c (bsc#984837)
  • CVE-2016-5314: Out-of-bounds write in PixarLogDecode() function (bsc#984831)
  • CVE-2016-5317: Out-of-bounds write in PixarLogDecode() function in libtiff.so (bsc#984842)
  • CVE-2016-5320: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c (bsc#984808)
Record
SUSE-SU-2016:2271-1
Updated
2026-11-02
OSVSUSE-SU-2016:2527-1No score

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba (bsc#974449)
  • Various out-of-bound write vulnerabilities with unspecified impact (MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098)
  • CVE-2016-5314: Specially crafted TIFF images could trigger a crash that could result in DoS (bsc#984831)
  • CVE-2016-5316: Specially crafted TIFF images could trigger a crash in the rgb2ycbcr tool, leading to Doa (bsc#984837)
  • CVE-2016-5317: Specially crafted TIFF images could trigger a crash through an out of bound write (bsc#984842)
  • CVE-2016-5320: Specially crafted TIFF images could trigger a crash or potentially allow remote code execution when using the rgb2ycbcr command (bsc#984808)
  • CVE-2016-5875: Specially crafted TIFF images could trigger could allow arbitrary code execution (bsc#987351)
  • CVE-2016-3623: Specially crafted TIFF images could trigger a crash in rgb2ycbcr (bsc#974618)
  • CVE-2016-3945: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution via tiff2rgba (bsc#974614)
  • CVE-2016-3990: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution (bsc#975069)
  • CVE-2016-3186: Specially crafted TIFF imaged could trigger a crash in the gif2tiff command via a buffer overflow (bsc#973340)
Record
SUSE-SU-2016:2527-1
Updated
2026-11-02
OSVSUSE-SU-2016:3301-1No score

Security update for tiff

The tiff library and tools were updated to version 4.0.7 fixing various bug and security issues.

  • CVE-2014-8127: out-of-bounds read with malformed TIFF image in multiple tools [bnc#914890]
  • CVE-2016-9297: tif_dirread.c read outside buffer in _TIFFPrintField() [bnc#1010161]
  • CVE-2016-3658: Illegal read in TIFFWriteDirectoryTagLongLong8Array function in tiffset / tif_dirwrite.c [bnc#974840]
  • CVE-2016-9273: heap overflow [bnc#1010163]
  • CVE-2016-3622: divide By Zero in the tiff2rgba tool [bnc#974449]
  • CVE-2016-5652: tiff2pdf JPEG Compression Tables Heap Buffer Overflow [bnc#1007280]
  • CVE-2016-9453: out-of-bounds Write memcpy and less bound check in tiff2pdf [bnc#1011107]
  • CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat [bnc#987351]
  • CVE-2016-9448: regression introduced by fixing CVE-2016-9297 [bnc#1011103]
  • CVE-2016-5321: out-of-bounds read in tiffcrop / DumpModeDecode() function [bnc#984813]
  • CVE-2016-5323: Divide-by-zero in _TIFFFax3fillruns() function (null ptr dereference?) [bnc#984815]
Record
SUSE-SU-2016:3301-1
Updated
2026-11-02
OSVUBUNTU-CVE-2016-5875No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
UBUNTU-CVE-2016-5875
Updated
2026-11-02
OSVUSN-3212-1No score

tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.

Record
USN-3212-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 120 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open