Red Hat Security AdvisoryRHSA-2023:6575
libtiff security update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) libtiff-tools-4.4.0-10.el9
- Red Hat Enterprise Linux AppStream (v. 9) libtiff-4.4.0-10.el9, libtiff-devel-4.4.0-10.el9
Fixes 6 records
Priority MEDIUM 58
libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00417 · Published 2023-06-29 · Partial fix CWE-120
Priority MEDIUM 58
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00427 · Published 2023-05-17 · Fixed CWE-476
Priority MEDIUM 51
tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.10639 · Published 2017-12-02 · Partial fix CWE-119
Priority LOW 31
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01124 · Published 2023-06-19 · Partial fix CWE-476
Priority LOW 25
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00367 · Published 2023-06-14 · Partial fix CWE-787
Priority LOW 25
A memory leak flaw was found in Libtiff's tiffcrop utility.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00349 · Published 2023-10-04 · Partial fix · 4.4.0-10.el9 CWE-119
THREATIST.IORead the docs