Summary
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)
* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)
* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)
* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libtiff | 4.4.0-12.el9 |
| AlmaLinux · 9 | libtiff-devel | 4.4.0-12.el9 |
| AlmaLinux · 9 | libtiff-tools | 4.4.0-12.el9 |
Vulnerabilities 5
-
Medium 6.5
Segmentation fault in fax3encode in libtiff/tif_fax3.c
A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
-
Medium 6.5
Libtiff: integer overflow in tiffcp.c
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
-
Medium 6.5
Libtiff: potential integer overflow in raw2tiff.c
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer o…
-
Low 3.3
Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
-
Unscored —
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of servic…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-40090
-
report
https://access.redhat.com/security/cve/CVE-2023-3618
-
report
https://access.redhat.com/security/cve/CVE-2023-40745
-
report
https://access.redhat.com/security/cve/CVE-2023-41175
-
report
https://access.redhat.com/security/cve/CVE-2023-6228
-
report
https://bugzilla.redhat.com/2215865
-
report
https://bugzilla.redhat.com/2234970
-
report
https://bugzilla.redhat.com/2235264
-
report
https://bugzilla.redhat.com/2235265
-
report
https://bugzilla.redhat.com/2240995
-
advisory
https://errata.almalinux.org/9/ALSA-2024-2289.html