Skip to content
OpenAdvisories
Medium ELSA-2023-2883 2 CVEs

Moderate: libtiff security update (Oracle Linux 8)

Published May 24, 2023 · Updated May 24, 2023

Ecosystem: Oracle Linux

Summary

[4.0.9-27]
- Fix various CVEs
- Resolves: CVE-2022-3627 CVE-2022-3970

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 libtiff 0:4.0.9-27.el8
Oracle Linux · 8 libtiff-devel 0:4.0.9-27.el8
Oracle Linux · 8 libtiff-tools 0:4.0.9-27.el8

Vulnerabilities 2

  • Medium 6.3
    CVE-2022-3970

    LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow

    A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit…

    tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2022-3627

    LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection,…

    LibTIFF LibTIFF tiff tiff Debian Azure Linux Alpine