libTIFF: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 5.5
  CVE-2023-2908

  Libtiff: null pointer dereference in tif_dir.c

  A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application …

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Jun 30, 2023

Revision history

1. 2025-06-30 #5

   Neue Updates von Dell aufgenommen

2. 2025-01-20 #4

   Neue Updates von Debian aufgenommen

3. 2023-08-15 #3

   Neue Updates von Ubuntu aufgenommen

4. 2023-07-31 #2

   Neue Updates von Debian aufgenommen

5. 2023-06-29 #1

   Initiale Fassung

References

• RedHat Bugzilla vom 2023-06-29
  https://bugzilla.redhat.com/show_bug.cgi?id=2218830
• PoC auf gitlab
  https://gitlab.com/libtiff/libtiff/-/merge_requests/479
• Debian Security Advisory DLA-3513 vom 2023-08-01
  https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
• Ubuntu Security Notice USN-6290-1 vom 2023-08-16
  https://ubuntu.com/security/notices/USN-6290-1
• Debian Security Advisory DLA-4026 vom 2025-01-20
  https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html
• Dell Security Advisory DSA-2025-234 vom 2025-07-01
  https://www.dell.com/support/kbdoc/000337969