Summary
It was discovered that LibTIFF could be made to run into an infinite loop.
If a user or an automated system were tricked into opening a specially
crafted image file, an attacker could possibly use this issue to cause a
denial of service. (CVE-2022-40090)
It was discovered that LibTIFF could be made leak memory. If a user or an
automated system were tricked into opening a specially crafted image file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2023-3576)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | tiff | 4.1.0+git191117-2ubuntu0.20.04.11 |
| Ubuntu · 22.04 LTS 22.04:LTS | tiff | 4.3.0-6ubuntu0.7 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | tiff | 4.0.3-7ubuntu0.11+esm11 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | tiff | 4.0.6-1ubuntu0.8+esm14 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | tiff | 4.0.9-5ubuntu0.10+esm4 |
Vulnerabilities 2
-
Medium 5.5
Libtiff: memory leak in tiffcrop.c
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an applicatio…
-
Unscored —
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of servic…