Known vulnerabilities in tiff (Alpine package) - page 4

Vendor: Alpine Linux Development Team
Software: tiff (Alpine package)
Software CPE: cpe:2.3:o:alpine:tiff_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 82
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tiff (Alpine package) tiff (Alpine package) is affected by 82 known vulnerabilities: 17 high, 37 medium, 28 low Critical High Medium Low

Vulnerabilities (82)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29281 - Memory corruption
CVE-2008-2327		 CWE-119 High
No
No
 3.8.2-r3, 3.9.5-r0 25.06.2020 SB2008082701
SB2010060802
SB2008090801
#VU32197 - Heap-based Buffer Overflow
CVE-2016-3991		 CWE-122 Medium
No
No
 4.0.6-r2 21.09.2016 SB2016092137
SB2016121617
#VU31949 - Out-of-bounds write
CVE-2015-8784		 CWE-787 Medium
No
No
 4.0.6-r1, 4.0.6-r2, 4.0.6-r3 13.04.2016 SB2016041308
SB2016070419
#VU32278 - Memory corruption
CVE-2015-8683		 CWE-119 Low
No
No
 4.0.6-r1, 4.0.6-r2, 4.0.6-r3 13.04.2016 SB2016041310
SB2016070420
SB2022021828
and 1 more
#VU32276 - Memory corruption
CVE-2015-8665		 CWE-119 Low
No
No
 4.0.6-r1, 4.0.6-r2, 4.0.6-r3 13.04.2016 SB2016041309
SB2016070417
SB2022021828
and 1 more
#VU32277 - Out-of-bounds write
CVE-2015-8781		 CWE-787 Medium
No
No
 4.0.6-r1, 4.0.6-r2, 4.0.6-r3 01.02.2016 SB2016020102
SB2016070418
#VU32195 - Heap-based Buffer Overflow
CVE-2015-8668		 CWE-122 High
No
No
 4.0.6-r2 08.01.2016 SB2016010801
SB2016121613
SB2025021407
#VU32624 - Improper input validation
CVE-2013-4231		 CWE-20 Medium
No
No
 4.0.3-r2, 4.0.3-r3 19.01.2014 SB2014011902
SB2013110601
SB2014062601
and 2 more
#VU32525 - Memory corruption
CVE-2013-4244		 CWE-119 Medium
No
No
 4.0.3-r3, 4.0.6-r0 28.09.2013 SB2013092802
SB2014062402
SB2014062601
and 2 more
#VU31835 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4243		 CWE-94 Medium
No
No
 4.0.3-r3, 4.0.6-r0 10.09.2013 SB2013091001
SB2014062401
SB2014062601
#VU31838 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4232		 CWE-94 Medium
No
No
 4.0.3-r2, 4.0.3-r3 10.09.2013 SB2013091002
SB2013110602
SB2014062601
and 2 more
#VU32636 - Stack-based buffer overflow
CVE-2013-1961		 CWE-121 High
No
No
 4.0.3-r1 03.07.2013 SB2013070301
SB2013080703
SB2014022105
and 1 more
#VU32637 - Heap-based Buffer Overflow
CVE-2013-1960		 CWE-122 High
No
No
 4.0.3-r1 03.07.2013 SB2013070302
SB2013080702
SB2014022105
and 1 more
#VU32729 - Stack-based buffer overflow
CVE-2012-5581		 CWE-121 Medium
No
No
 3.9.6-r2 05.01.2013 SB2013010501
SB2013011705
SB2012122003
#VU32749 - Heap-based Buffer Overflow
CVE-2012-4564		 CWE-122 Medium
No
No
 3.9.7-r0 11.11.2012 SB2012111104
SB2012120602
SB2012122003
and 2 more
#VU32748 - Heap-based Buffer Overflow
CVE-2012-4447		 CWE-122 Medium
No
No
 3.9.7-r0 28.10.2012 SB2012102801
SB2012120601
SB2012122003
and 2 more
#VU32773 - Heap-based Buffer Overflow
CVE-2012-3401		 CWE-122 Medium
No
No
 3.9.6-r1 13.08.2012 SB2012081302
SB2012081514
SB2012122003
#VU32782 - Heap-based Buffer Overflow
CVE-2012-2088		 CWE-122 Medium
No
No
 3.9.6-r0 22.07.2012 SB2012072201
SB2012072303
SB2012071905
and 2 more
#VU33953 - Improper input validation
CVE-2012-1173		 CWE-20 Medium
No
No
 3.9.5-r0 04.06.2012 SB2012060401
SB2012051506
SB2012043006
and 1 more
#VU31846 - Stack-based buffer overflow
CVE-2006-3459		 CWE-121 Medium
Available
No
 3.9.5-r0 03.08.2006 SB2006080301
SB2012051505


Showing elements 61 - 80 out of 82