Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-8128

Fixed in a distro release EPSS 4%

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

Published 2020-02-12 · CVE record · OSV

Products: libtiff

Distro releases

ReleasePackageFixed in
Debian 12tiff4.0.3-12.3
Debian 13tiff4.0.3-12.3
Debian 14tiff4.0.3-12.3
Debian 6.0tiff3.9.4-5+squeeze12
Debian 7tiff4.0.2-6+deb7u7
Debian 7tiff4.0.2-6+deb7u4
Debian 7tiff33.9.6-11+deb7u1
SUSE Linux Enterprise Desktop 11 SP3tiff3.8.2-141.160.1
SUSE Linux Enterprise Desktop 11 SP4tiff3.8.2-141.160.1
SUSE Linux Enterprise Desktop 12tiff4.0.4-12.2
SUSE Linux Enterprise Desktop 12 SP2tiff4.0.9-44.7.1
SUSE Linux Enterprise Desktop 12 SP3tiff4.0.9-44.7.1
SUSE Linux Enterprise Server 11 SP3tiff3.8.2-141.160.1
SUSE Linux Enterprise Server 11 SP3-TERADATAtiff3.8.2-141.160.1
SUSE Linux Enterprise Server 11 SP4tiff3.8.2-141.169.9.1
SUSE Linux Enterprise Server 11 SP4tiff3.8.2-141.160.1
SUSE Linux Enterprise Server 12tiff4.0.4-12.2
SUSE Linux Enterprise Server 12 SP2tiff4.0.9-44.7.1
SUSE Linux Enterprise Server 12 SP3tiff4.0.9-44.7.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2tiff4.0.9-44.7.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3tiff3.8.2-141.160.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4tiff3.8.2-141.160.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4tiff3.8.2-141.169.9.1
SUSE Linux Enterprise Server for SAP Applications 12tiff4.0.4-12.2
SUSE Linux Enterprise Server for SAP Applications 12 SP2tiff4.0.9-44.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3tiff4.0.9-44.7.1
SUSE Linux Enterprise Software Development Kit 11 SP3tiff3.8.2-141.160.1
SUSE Linux Enterprise Software Development Kit 11 SP4tiff3.8.2-141.169.9.1
SUSE Linux Enterprise Software Development Kit 11 SP4tiff3.8.2-141.160.1
SUSE Linux Enterprise Software Development Kit 12tiff4.0.4-12.2
SUSE Linux Enterprise Software Development Kit 12 SP2tiff4.0.9-44.7.1
SUSE Linux Enterprise Software Development Kit 12 SP3tiff4.0.9-44.7.1
Ubuntu 14.04 LTStiff4.0.3-7ubuntu0.2
openSUSE Tumbleweedtiff4.0.7-1.1