CVE-2022-2869: Integer Underflow
In libtiff's tiffcrop (tools/tiffcrop.c) utility, there is a uint32t underflow that leads to an out-of-bounds read and write. A crafted file could trigger this flaw when certain command line arguments are also supplied.
References: 1. https://gitlab.com/libtiff/libtiff/-/issues/352 2. https://gitlab.com/libtiff/libtiff/-/mergerequests/294/diffs?commitid=bcf28bb7f630f24fa47701a9907013f3548092cd
Other sources
LibTIFF is vulnerable to a denial of service, caused by a uint32t underflow that leads to an out-of-bounds read and write in the extractContigSamples8bits routine when parsing files in tiffcrop.c. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause a denial of service.
— IBM
libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tiffto a version that resolves this vulnerability.Fixed in 4.1.0+git191117-2~deb10u8Fixed in 4.2.0-1+deb11u4Fixed in 4.2.0-1+deb11u5Fixed in 4.5.0-6+deb12u1Fixed in 4.5.1+git230720-3 - Upgrade
Upgrade
redhat/libtiffto a version that resolves this vulnerability.Fixed in 4.4.0
Event History
Frequently Asked Questions
What is CVE-2022-2869?
CVE-2022-2869 is a vulnerability in libtiff's tiffcrop tool that allows an attacker to trigger out-of-bounds read and write by supplying a crafted file to tiffcrop.
How does CVE-2022-2869 affect libtiff?
CVE-2022-2869 affects libtiff's tiffcrop tool, specifically in the extractContigSamples8bits routine.
What is the severity of CVE-2022-2869?
The severity of CVE-2022-2869 is medium.
How can an attacker exploit CVE-2022-2869?
An attacker can exploit CVE-2022-2869 by tricking a user into opening a crafted file with tiffcrop.
Is there a fix for CVE-2022-2869?
Yes, there are fixes available for CVE-2022-2869. Please refer to the official references for the specific fixes.