Test ID:	1.3.6.1.4.1.25623.1.0.892777
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-2777-1)
Summary:	The remote host is missing an update for the Debian 'tiff' package(s) announced via the DLA-2777-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'tiff' package(s) announced via the DLA-2777-1 advisory. Vulnerability Insight: Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131 Buffer Overflow in LibTiff allows attackers to cause a denial of service via the 'invertImage()' function in the component tiffcrop. CVE-2020-19144 Buffer Overflow in LibTiff allows attackers to cause a denial of service via the in _TIFFmemcpy function in the component tif_unix.c. For Debian 9 stretch, these problems have been fixed in version 4.0.8-2+deb9u7. We recommend that you upgrade your tiff packages. For the detailed security status of tiff please refer to its security tracker page at: [link moved to references] Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'tiff' package(s) on Debian 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-18768 http://bugzilla.maptools.org/show_bug.cgi?id=2848 Common Vulnerability Exposure (CVE) ID: CVE-2020-19131 http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elibtiff%E4%B8%ADinvertimage%E5%87%BD%E6%95%B0%E5%A0%86%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%88%86%E6%9E%90/ http://bugzilla.maptools.org/show_bug.cgi?id=2831 https://lists.debian.org/debian-lts-announce/2021/10/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2020-19144 http://bugzilla.maptools.org/show_bug.cgi?id=2852 https://gitlab.com/libtiff/libtiff/-/issues/159
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.