Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-41175: Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow. CVE-2023-40745: Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow. CVE-2023-30775: A vulnerability was found in libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c CVE-2022-48281: processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. CVE-2022-3598: LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libtiff | 0:4.4.0-4.amzn2023.0.16 |
| Amazon Linux · 2023 | libtiff-debuginfo | 0:4.4.0-4.amzn2023.0.16 |
| Amazon Linux · 2023 | libtiff-debugsource | 0:4.4.0-4.amzn2023.0.16 |
| Amazon Linux · 2023 | libtiff-devel | 0:4.4.0-4.amzn2023.0.16 |
| Amazon Linux · 2023 | libtiff-static | 0:4.4.0-4.amzn2023.0.16 |
| Amazon Linux · 2023 | libtiff-tools | 0:4.4.0-4.amzn2023.0.16 |
| Amazon Linux · 2023 | libtiff-tools-debuginfo | 0:4.4.0-4.amzn2023.0.16 |
Vulnerabilities 5
-
Medium 6.5
Libtiff: integer overflow in tiffcp.c
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
-
Medium 6.5
Libtiff: potential integer overflow in raw2tiff.c
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer o…
-
Medium 5.5
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attack…
-
Medium 5.5
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of si…
-
Medium 5.5
A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamp…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-3598.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48281.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-30775.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-40745.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-41175.html