ID de Prueba:	1.3.6.1.4.1.25623.1.0.140011
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - TIFF vulnerability CVE-2015-7554
Resumen:	The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF.
Descripción:	Summary: The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7554 BugTraq ID: 79699 http://www.securityfocus.com/bid/79699 Bugtraq: 20151226 libtiff: invalid write (CVE-2015-7554) (Google Search) http://www.securityfocus.com/archive/1/537205/100/0/threaded http://seclists.org/fulldisclosure/2015/Dec/119 https://security.gentoo.org/glsa/201701-16 http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html http://www.openwall.com/lists/oss-security/2015/12/26/7 RedHat Security Advisories: RHSA-2016:1546 http://rhn.redhat.com/errata/RHSA-2016-1546.html RedHat Security Advisories: RHSA-2016:1547 http://rhn.redhat.com/errata/RHSA-2016-1547.html SuSE Security Announcement: openSUSE-SU-2016:0212 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html SuSE Security Announcement: openSUSE-SU-2016:0215 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html SuSE Security Announcement: openSUSE-SU-2016:0252 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.