CVE-2017-13726 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-13726 Interim 1 33 2023-12-09T01:01:06Z current 2021-05-30T14:01:19Z 2023-12-09T01:01:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-13726 There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html E-Mail link for SUSE-CU-2019:721-1 https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html E-Mail link for SUSE-SU-2018:1826-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/35GXTTHY6R26WIDWDJILDL4B3SUNHWM4/#35GXTTHY6R26WIDWDJILDL4B3SUNHWM4 E-Mail link for openSUSE-SU-2018:1834-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container caasp/v4/nginx-ingress-controller:beta1 Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 libtiff-devel libtiff-devel-32bit libtiff-devel-4.0.9-44.15.2 libtiff3 libtiff3-32bit libtiff5 libtiff5-32bit libtiff5-32bit-4.0.9-44.15.2 libtiff5-4.0.9-44.15.2 tiff tiff-4.0.9-44.15.2 libtiff5-4.0.9-44.15.2 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-Azure libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-EC2-HVM libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-GCE libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP4-SAP-OCI-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.15.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libtiff5-32bit-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libtiff5-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Server 12 SP3 libtiff5-32bit-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Server 12 SP3 tiff-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Server 12 SP3 libtiff5-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtiff5-32bit-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 tiff-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtiff-devel-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libtiff-devel-4.0.9-44.15.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 tiff as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata tiff as a component of SUSE Linux Enterprise Server 11 SP3 LTSS tiff as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata libtiff3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libtiff3-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tiff as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libtiff5 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libtiff5-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS tiff as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libtiff5 as a component of SUSE Linux Enterprise Server 12 SP2 libtiff5-32bit as a component of SUSE Linux Enterprise Server 12 SP2 tiff as a component of SUSE Linux Enterprise Server 12 SP2 libtiff5 as a component of SUSE Linux Enterprise Server 12-LTSS libtiff5-32bit as a component of SUSE Linux Enterprise Server 12-LTSS tiff as a component of SUSE Linux Enterprise Server 12-LTSS libtiff-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtiff-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 tiff as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtiff-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 tiff as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. CVE-2017-13726 Container caasp/v4/nginx-ingress-controller:beta1:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-Azure:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-GCE:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-GCE-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP4-SAP-OCI-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.15.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.15.2 SUSE Linux Enterprise Desktop 12 SP3:libtiff5-4.0.9-44.15.2 SUSE Linux Enterprise Desktop 12 SP3:libtiff5-32bit-4.0.9-44.15.2 SUSE Linux Enterprise Server 12 SP3:libtiff5-4.0.9-44.15.2 SUSE Linux Enterprise Server 12 SP3:libtiff5-32bit-4.0.9-44.15.2 SUSE Linux Enterprise Server 12 SP3:tiff-4.0.9-44.15.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.15.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.15.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.15.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libtiff-devel-4.0.9-44.15.2 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.15.2 SUSE Linux Enterprise Server 11 SP1 for Teradata:tiff SUSE Linux Enterprise Server 11 SP3 LTSS:tiff SUSE Linux Enterprise Server 11 SP3 for Teradata:tiff SUSE Linux Enterprise Server 11 SP4-LTSS:libtiff3 SUSE Linux Enterprise Server 11 SP4-LTSS:libtiff3-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:tiff SUSE Linux Enterprise Server 12 SP1-LTSS:libtiff5 SUSE Linux Enterprise Server 12 SP1-LTSS:libtiff5-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:tiff SUSE Linux Enterprise Server 12 SP2:libtiff5 SUSE Linux Enterprise Server 12 SP2:libtiff5-32bit SUSE Linux Enterprise Server 12 SP2:tiff SUSE Linux Enterprise Server 12-LTSS:libtiff5 SUSE Linux Enterprise Server 12-LTSS:libtiff5-32bit SUSE Linux Enterprise Server 12-LTSS:tiff SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:tiff SUSE Linux Enterprise Software Development Kit 12 SP2:libtiff-devel SUSE Linux Enterprise Software Development Kit 12 SP2:tiff moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L