Known vulnerabilities in libtiff4 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libtiff4:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 18
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libtiff4 (Ubuntu package) libtiff4 (Ubuntu package) is affected by 18 known vulnerabilities: 5 high, 13 medium Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29281 - Memory corruption
CVE-2008-2327
CWE-119 High
No
No
3.7.4-1ubuntu3.3, 3.8.2-6ubuntu1, 3.8.2-7ubuntu2.1, 3.8.2-7ubuntu3.1 25.06.2020 SB2008082701
SB2010060802
SB2008090801
and 1 more
#VU29280 - Memory corruption
CVE-2009-2285
CWE-119 High
Available
No
3.7.4-1ubuntu3.4, 3.8.2-7ubuntu3.2, 3.8.2-11ubuntu0.8.10.1, 3.8.2-11ubuntu0.9.04.1 25.06.2020 SB2009070101
SB2010060803
SB2009080702
and 1 more
#VU29276 - Integer overflow
CVE-2009-2347
CWE-190 High
No
No
3.7.4-1ubuntu3.6, 3.8.2-7ubuntu3.4, 3.8.2-11ubuntu0.8.10.3, 3.8.2-11ubuntu0.9.04.3 25.06.2020 SB2009071402
SB2010060804
SB2009080702
and 1 more
#VU32624 - Improper input validation
CVE-2013-4231
CWE-20 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 19.01.2014 SB2014011902
SB2013110601
SB2014062601
and 3 more
#VU32525 - Memory corruption
CVE-2013-4244
CWE-119 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 28.09.2013 SB2013092802
SB2014062402
SB2014062601
and 3 more
#VU31835 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4243
CWE-94 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 10.09.2013 SB2013091001
SB2014062401
SB2014062601
and 1 more
#VU31838 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4232
CWE-94 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 10.09.2013 SB2013091002
SB2013110602
SB2014062601
and 3 more
#VU32636 - Stack-based buffer overflow
CVE-2013-1961
CWE-121 High
No
No
3.9.2-2ubuntu0.13, 3.9.5-2ubuntu1.5 03.07.2013 SB2013070301
SB2013080703
SB2014022105
and 2 more
#VU32637 - Heap-based Buffer Overflow
CVE-2013-1960
CWE-122 High
No
No
3.9.2-2ubuntu0.13, 3.9.5-2ubuntu1.5 03.07.2013 SB2013070302
SB2013080702
SB2014022105
and 2 more
#VU32729 - Stack-based buffer overflow
CVE-2012-5581
CWE-121 Medium
No
No
3.8.2-7ubuntu3.16, 3.9.2-2ubuntu0.12, 3.9.5-1ubuntu1.5, 3.9.5-2ubuntu1.4 05.01.2013 SB2013010501
SB2013011705
SB2012122003
and 1 more
#VU32749 - Heap-based Buffer Overflow
CVE-2012-4564
CWE-122 Medium
No
No
3.8.2-7ubuntu3.14, 3.9.2-2ubuntu0.11, 3.9.5-1ubuntu1.4, 3.9.5-2ubuntu1.3 11.11.2012 SB2012111104
SB2012120602
SB2012122003
and 3 more
#VU32748 - Heap-based Buffer Overflow
CVE-2012-4447
CWE-122 Medium
No
No
3.8.2-7ubuntu3.14, 3.9.2-2ubuntu0.11, 3.9.5-1ubuntu1.4, 3.9.5-2ubuntu1.3 28.10.2012 SB2012102801
SB2012120601
SB2012122003
and 3 more
#VU32782 - Heap-based Buffer Overflow
CVE-2012-2088
CWE-122 Medium
No
No
3.8.2-7ubuntu3.12, 3.9.2-2ubuntu0.9, 3.9.4-5ubuntu6.2, 3.9.5-1ubuntu1.2, 3.9.5-2ubuntu1.1 22.07.2012 SB2012072201
SB2012072303
SB2012071905
and 3 more
#VU43805 - Improper input validation
CVE-2012-2113
CWE-20 Medium
No
No
3.8.2-7ubuntu3.12, 3.9.2-2ubuntu0.9, 3.9.4-5ubuntu6.2, 3.9.5-1ubuntu1.2, 3.9.5-2ubuntu1.1 22.07.2012 SB2012072207
SB2012071905
SB2012070603
and 2 more
#VU33953 - Improper input validation
CVE-2012-1173
CWE-20 Medium
No
No
3.8.2-7ubuntu3.10, 3.9.2-2ubuntu0.8, 3.9.4-2ubuntu0.5, 3.9.4-5ubuntu6.1, 3.9.5-1ubuntu1.1 04.06.2012 SB2012060401
SB2012051506
SB2012043006
and 2 more
#VU45090 - Heap-based Buffer Overflow
CVE-2009-5022
CWE-122 Medium
Available
No
3.9.2-2ubuntu0.7, 3.9.4-2ubuntu0.4 03.05.2011 SB2011032801
SB2015042119
#VU45091 - Improper input validation
CVE-2010-4665
CWE-20 Medium
No
No
3.8.2-7ubuntu3.10, 3.9.2-2ubuntu0.8, 3.9.4-2ubuntu0.5, 3.9.4-5ubuntu6.1, 3.9.5-1ubuntu1.1 03.05.2011 SB2011032801
SB2015040404
#VU45158 - Heap-based Buffer Overflow
CVE-2011-1167
CWE-122 Medium
No
No
3.7.4-1ubuntu3.11, 3.8.2-7ubuntu3.9, 3.8.2-13ubuntu0.6, 3.9.2-2ubuntu0.6, 3.9.4-2ubuntu0.3 28.03.2011 SB2011032801
SB2015040405