ELSA-2023-3711 — Moderate: libtiff security update (Oracle Linux 9)

Summary

[4.4.0-8]
- Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
CVE-2022-48281
- Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
CVE-2023-0799 CVE-2022-48281

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	libtiff	0:4.4.0-8.el9_2
Oracle Linux · 9	libtiff-devel	0:4.4.0-8.el9_2
Oracle Linux · 9	libtiff-tools	0:4.4.0-8.el9_2

Vulnerabilities 11

Medium 6.8

CVE-2023-0795

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-s…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0796

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-s…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0797

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and too…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0798

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-s…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0799

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-s…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0800

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0801

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and to…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0803

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 6.8

CVE-2023-0804

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-…

LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine

Feb 13, 2023
Medium 5.5

CVE-2022-48281

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of si…

tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

Jan 23, 2023

Moderate: libtiff security update (Oracle Linux 9)

Summary

Fixed packages 3

Vulnerabilities 11

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-s…

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-s…

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and too…

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-s…

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-s…

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-…

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and to…

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-…

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-…

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-…

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of si…