libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2023-30775

  A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamp…

  tiff tiff Debian Ubuntu
  May 19, 2023
• Unscored —
  CVE-2023-30774

  A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAME…

  tiff tiff openjpeg2 Debian Ubuntu Azure Linux
  May 19, 2023

Revision history

1. 2023-10-08 #4

   Neue Updates von Amazon aufgenommen

2. 2023-10-05 #3

   Neue Updates von Amazon aufgenommen

3. 2023-05-09 #2

   Neue Updates von Red Hat aufgenommen

4. 2023-04-16 #1

   Initiale Fassung

References

• Amazon Linux Security Advisory ALAS-2023-1847 vom 2023-10-06
  https://alas.aws.amazon.com/ALAS-2023-1847.html
• Amazon Linux Security Advisory ALAS2-2023-2274 vom 2023-10-06
  https://alas.aws.amazon.com/AL2/ALAS-2023-2274.html
• Red Hat Security Advisory RHSA-2023:2340 vom 2023-05-09
  https://access.redhat.com/errata/RHSA-2023:2340
• PoC auf GitLab
  https://gitlab.com/libtiff/libtiff/-/issues/464
• PoC auf GitLab
  https://gitlab.com/libtiff/libtiff/-/issues/463
• RedHat Customer Portal
  https://access.redhat.com/security/cve/CVE-2023-30775
• RedHat Customer Portal
  https://access.redhat.com/security/cve/CVE-2023-30774
• RedHat Bugzilla vom 2023-04-16
  https://bugzilla.redhat.com/show_bug.cgi?id=2187141
• RedHat Bugzilla vom 2023-04-16
  https://bugzilla.redhat.com/show_bug.cgi?id=2187139