Known vulnerabilities in libtiff4 (Ubuntu package) 3.9.2-2

Version: 3.9.2-2
Software CPE: cpe:2.3:o:canonical:libtiff4:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting libtiff4 (Ubuntu package) version 3.9.2-2 libtiff4 (Ubuntu package) 3.9.2-2 is affected by 15 vulnerabilities: 2 high, 13 medium Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32624 - Improper input validation
CVE-2013-4231
CWE-20 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 19.01.2014 SB2014011902
SB2013110601
SB2014062601
and 3 more
#VU32525 - Memory corruption
CVE-2013-4244
CWE-119 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 28.09.2013 SB2013092802
SB2014062402
SB2014062601
and 3 more
#VU31835 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4243
CWE-94 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 10.09.2013 SB2013091001
SB2014062401
SB2014062601
and 1 more
#VU31838 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4232
CWE-94 Medium
No
No
3.9.2-2ubuntu0.14, 3.9.5-2ubuntu1.6 10.09.2013 SB2013091002
SB2013110602
SB2014062601
and 3 more
#VU32636 - Stack-based buffer overflow
CVE-2013-1961
CWE-121 High
No
No
3.9.2-2ubuntu0.13, 3.9.5-2ubuntu1.5 03.07.2013 SB2013070301
SB2013080703
SB2014022105
and 2 more
#VU32637 - Heap-based Buffer Overflow
CVE-2013-1960
CWE-122 High
No
No
3.9.2-2ubuntu0.13, 3.9.5-2ubuntu1.5 03.07.2013 SB2013070302
SB2013080702
SB2014022105
and 2 more
#VU32729 - Stack-based buffer overflow
CVE-2012-5581
CWE-121 Medium
No
No
3.8.2-7ubuntu3.16, 3.9.2-2ubuntu0.12, 3.9.5-1ubuntu1.5, 3.9.5-2ubuntu1.4 05.01.2013 SB2013010501
SB2013011705
SB2012122003
and 1 more
#VU32749 - Heap-based Buffer Overflow
CVE-2012-4564
CWE-122 Medium
No
No
3.8.2-7ubuntu3.14, 3.9.2-2ubuntu0.11, 3.9.5-1ubuntu1.4, 3.9.5-2ubuntu1.3 11.11.2012 SB2012111104
SB2012120602
SB2012122003
and 3 more
#VU32748 - Heap-based Buffer Overflow
CVE-2012-4447
CWE-122 Medium
No
No
3.8.2-7ubuntu3.14, 3.9.2-2ubuntu0.11, 3.9.5-1ubuntu1.4, 3.9.5-2ubuntu1.3 28.10.2012 SB2012102801
SB2012120601
SB2012122003
and 3 more
#VU32782 - Heap-based Buffer Overflow
CVE-2012-2088
CWE-122 Medium
No
No
3.8.2-7ubuntu3.12, 3.9.2-2ubuntu0.9, 3.9.4-5ubuntu6.2, 3.9.5-1ubuntu1.2, 3.9.5-2ubuntu1.1 22.07.2012 SB2012072201
SB2012072303
SB2012071905
and 3 more
#VU43805 - Improper input validation
CVE-2012-2113
CWE-20 Medium
No
No
3.8.2-7ubuntu3.12, 3.9.2-2ubuntu0.9, 3.9.4-5ubuntu6.2, 3.9.5-1ubuntu1.2, 3.9.5-2ubuntu1.1 22.07.2012 SB2012072207
SB2012071905
SB2012070603
and 2 more
#VU33953 - Improper input validation
CVE-2012-1173
CWE-20 Medium
No
No
3.8.2-7ubuntu3.10, 3.9.2-2ubuntu0.8, 3.9.4-2ubuntu0.5, 3.9.4-5ubuntu6.1, 3.9.5-1ubuntu1.1 04.06.2012 SB2012060401
SB2012051506
SB2012043006
and 2 more
#VU45090 - Heap-based Buffer Overflow
CVE-2009-5022
CWE-122 Medium
Public exploit available
No
3.9.2-2ubuntu0.7, 3.9.4-2ubuntu0.4 03.05.2011 SB2011032801
SB2015042119
#VU45091 - Improper input validation
CVE-2010-4665
CWE-20 Medium
No
No
3.8.2-7ubuntu3.10, 3.9.2-2ubuntu0.8, 3.9.4-2ubuntu0.5, 3.9.4-5ubuntu6.1, 3.9.5-1ubuntu1.1 03.05.2011 SB2011032801
SB2015040404
#VU45158 - Heap-based Buffer Overflow
CVE-2011-1167
CWE-122 Medium
No
No
3.7.4-1ubuntu3.11, 3.8.2-7ubuntu3.9, 3.8.2-13ubuntu0.6, 3.9.2-2ubuntu0.6, 3.9.4-2ubuntu0.3 28.03.2011 SB2011032801
SB2015040405