Summary
It was discovered that LibTIFF could be made to read out of bounds when
processing certain malformed image files with the tiffcrop utility. If a
user were tricked into opening a specially crafted image file, an attacker
could possibly use this issue to cause tiffcrop to crash, resulting in a
denial of service.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | tiff | 4.1.0+git191117-2ubuntu0.20.04.10 |
| Ubuntu · 22.04 LTS 22.04:LTS | tiff | 4.3.0-6ubuntu0.6 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | tiff | 4.0.3-7ubuntu0.11+esm10 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | tiff | 4.0.6-1ubuntu0.8+esm13 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | tiff | 4.0.9-5ubuntu0.10+esm3 |
Vulnerabilities 1
-
Unscored —
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to a…
References
-
report
https://ubuntu.com/security/CVE-2023-1916