Red Hat Security Advisory: libtiff security update

Fixed packages 9

Vulnerabilities 11

• Medium 6.8
  CVE-2023-0795

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0796

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0797

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and too…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0798

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0799

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0800

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0801

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and to…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0802

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0803

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0804

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 5.5
  CVE-2022-48281

  processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of si…

  tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine
  Jan 23, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2163606
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170146
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170151
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170157
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170167
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170172
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2170192
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3711.json
• report
  https://access.redhat.com/security/cve/CVE-2022-48281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48281
• report
  https://access.redhat.com/security/cve/CVE-2023-0795
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0795
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0795
• report
  https://access.redhat.com/security/cve/CVE-2023-0796
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0796
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0796
• report
  https://access.redhat.com/security/cve/CVE-2023-0797
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0797
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0797
• report
  https://access.redhat.com/security/cve/CVE-2023-0798
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0798
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0798
• report
  https://access.redhat.com/security/cve/CVE-2023-0799
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0799
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0799
• report
  https://access.redhat.com/security/cve/CVE-2023-0800
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0800
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0800
• report
  https://access.redhat.com/security/cve/CVE-2023-0801
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0801
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0801
• report
  https://access.redhat.com/security/cve/CVE-2023-0802
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0802