Known vulnerabilities in tiff (Alpine package)

Vendor: Alpine Linux Development Team
Software: tiff (Alpine package)
Software CPE: cpe:2.3:o:alpine:tiff_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 82
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tiff (Alpine package) tiff (Alpine package) is affected by 82 known vulnerabilities: 17 high, 37 medium, 28 low Critical High Medium Low

Vulnerabilities (82)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22615 - Integer overflow
CVE-2019-17546		 CWE-190 High
No
No
 4.0.10-r2 10.11.2019 SB2019101413
SB2019101414
SB2020012302
and 18 more
#VU20390 - Integer overflow
CVE-2019-14973		 CWE-190 Medium
No
No
 4.0.10-r1 26.08.2019 SB2019082710
SB2019110501
SB2020012302
and 15 more
#VU20347 -
CVE-2019-10927		 Medium
No
No
 4.0.10-r2 21.08.2019 SB2019082105
SB2019110207
#VU33769 - Improper input validation
CVE-2017-16232		 CWE-20 Medium
No
No
 4.0.9-r0 21.03.2019 SB2019032127
SB2017112323
#VU31989 - Memory corruption
CVE-2017-16231		 CWE-119 Low
No
No
 4.0.9-r0 21.03.2019 SB2019032125
SB2017112322
#VU17016 - Missing release of memory after effective lifetime
CVE-2019-6128		 CWE-401 Low
No
No
 4.0.10-r3 16.01.2019 SB2019011605
SB2019040509
SB2019110501
and 4 more
#VU16180 - Heap-based Buffer Overflow
CVE-2018-12900		 CWE-122 Low
No
No
 4.0.10-r0 30.11.2018 SB2018113002
SB2018113003
SB2019080629
and 6 more
#VU15967 - Out-of-bounds write
CVE-2018-18557		 CWE-787 High
No
No
 4.0.10-r0 20.11.2018 SB2018112002
SB2018112101
SB2018113002
and 11 more
#VU15901 - NULL Pointer Dereference
CVE-2018-18661		 CWE-476 Low
No
No
 4.0.10-r0 13.11.2018 SB2018111502
SB2018112002
SB2018112101
and 10 more
#VU15532 - Out-of-bounds read
CVE-2018-17101		 CWE-125 Low
No
No
 4.0.9-r6 25.10.2018 SB2018090811
SB2018120304
SB2018102427
and 8 more
#VU15531 - Memory corruption
CVE-2018-17100		 CWE-119 Low
No
No
 4.0.9-r6 24.10.2018 SB2018090811
SB2018102427
SB2018102428
and 8 more
#VU13373 - Improper input validation
CVE-2018-10963		 CWE-20 Low
No
No
 4.0.9-r5, 4.0.9-r6 16.06.2018 SB2018061715
SB2018062904
SB2018071404
and 9 more
#VU12422 - Out-of-bounds read
CVE-2018-10779		 CWE-125 Low
No
No
 4.0.9-r6 07.05.2018 SB2018050811
SB2018111502
SB2018112101
and 10 more
#VU11500 - Resource exhaustion
CVE-2018-5784		 CWE-400 Low
No
No
 4.0.9-r2 03.04.2018 SB2018011917
SB2018112101
SB2018120304
and 3 more
#VU11499 - Memory corruption
CVE-2017-9935		 CWE-119 High
No
No
 4.0.9-r5, 4.0.9-r6 03.04.2018 SB2018011917
SB2018012706
SB2018112002
and 7 more
#VU11496 - Heap-based Buffer Overflow
CVE-2017-17095		 CWE-122 Low
No
No
 4.0.9-r5, 4.0.9-r6 03.04.2018 SB2018011917
SB2018120304
SB2020031510
and 11 more
#VU11494 - Improper input validation
CVE-2017-11613		 CWE-20 Low
No
No
 4.0.9-r5, 4.0.9-r6 03.04.2018 SB2018011917
SB2018062904
SB2018071404
and 8 more
#VU11263 - Heap-based Buffer Overflow
CVE-2018-8905		 CWE-122 High
No
No
 4.0.9-r4 22.03.2018 SB2018032604
SB2018062904
SB2018071404
and 10 more
#VU10792 - NULL Pointer Dereference
CVE-2018-7456		 CWE-476 Low
No
No
 4.0.9-r3 01.03.2018 SB2018030107
SB2018062904
SB2018071404
and 11 more
#VU9820 - NULL Pointer Dereference
CVE-2017-18013		 CWE-476 Low
No
No
 4.0.9-r1 01.01.2018 SB2018010201
SB2018011917
SB2018062904
and 7 more


Showing elements 1 - 20 out of 82