Summary
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)
* libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)
* libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libtiff | 4.0.9-32.el8_10 |
| AlmaLinux · 8 | libtiff-devel | 4.0.9-32.el8_10 |
| AlmaLinux · 8 | libtiff-tools | 4.0.9-32.el8_10 |
Vulnerabilities 4
-
High 7.5CVE-2023-52356 Public exploit
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
-
Low 3.3
Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
-
Unscored —
ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (h…
-
Unscored —
libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size af…
References
-
report
https://access.redhat.com/security/cve/CVE-2018-15209
-
report
https://access.redhat.com/security/cve/CVE-2023-25433
-
report
https://access.redhat.com/security/cve/CVE-2023-52356
-
report
https://access.redhat.com/security/cve/CVE-2023-6228
-
report
https://bugzilla.redhat.com/1614051
-
report
https://bugzilla.redhat.com/2218744
-
report
https://bugzilla.redhat.com/2240995
-
report
https://bugzilla.redhat.com/2251344
-
advisory
https://errata.almalinux.org/8/ALSA-2024-5079.html