ID de Prueba:	1.3.6.1.4.1.25623.1.0.140011
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - TIFF vulnerability CVE-2015-7554
Resumen:	The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF.
Descripción:	Summary: The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7554 20151226 libtiff: invalid write (CVE-2015-7554) http://seclists.org/fulldisclosure/2015/Dec/119 http://www.securityfocus.com/archive/1/537205/100/0/threaded 79699 http://www.securityfocus.com/bid/79699 GLSA-201701-16 https://security.gentoo.org/glsa/201701-16 RHSA-2016:1546 http://rhn.redhat.com/errata/RHSA-2016-1546.html RHSA-2016:1547 http://rhn.redhat.com/errata/RHSA-2016-1547.html [oss-security] 20151226 libtiff: invalid write (CVE-2015-7554) http://www.openwall.com/lists/oss-security/2015/12/26/7 http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html openSUSE-SU-2016:0212 http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html openSUSE-SU-2016:0215 http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html openSUSE-SU-2016:0252 http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.