Red Hat Security Advisory: libtiff security update

Fixed packages 9

Vulnerabilities 6

• Medium 5.9
  CVE-2023-3316

  A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

  A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Jun 19, 2023
• Medium 5.5
  CVE-2023-26965

  loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

  tiff tiff libtiff Debian Ubuntu Azure Linux
  Jun 14, 2023
• Medium 5.5
  CVE-2023-2731

  A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw al…

  tiff openjpeg2 libtiff Debian Azure Linux
  May 17, 2023
• Medium 5.5
  CVE-2023-3576

  Libtiff: memory leak in tiffcrop.c

  A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an applicatio…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 4, 2023
• Unscored —
  CVE-2017-17095 Public exploit EPSS 11%

  tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-…

  tiff tiff tiff Debian Ubuntu Alpine
  Dec 2, 2017
• Unscored —
  CVE-2023-26966

  libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file an…

  tiff tiff libtiff Debian Ubuntu Azure Linux
  Jun 29, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2207635
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2215206
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2216080
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218749
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219340
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6575.json
• report
  https://access.redhat.com/security/cve/CVE-2017-17095
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1524284
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-17095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-17095
• report
  https://access.redhat.com/security/cve/CVE-2023-2731
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2731
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2731
• report
  https://access.redhat.com/security/cve/CVE-2023-3316
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3316
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3316
• report
  https://access.redhat.com/security/cve/CVE-2023-3576
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3576
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3576
• report
  https://access.redhat.com/security/cve/CVE-2023-26965
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-26965
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-26965
• report
  https://access.redhat.com/security/cve/CVE-2023-26966
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-26966
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-26966