CVE-2023-0798: Medium severity ibm cognos analytics vulnerability
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractContigSamplesShifted8bits function in tools/tiffcrop.c, resulting in a Denial of Service and limited information disclosure.
Other sources
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LibTIFF is vulnerable to a denial of service, caused by a segmentation fault when processing TIFF files in extractContigSamplesShifted8bits in tools/tiffcrop.c. By persuading a victim to open a specially-crafted TIFF file, a remote attacker could overflow a buffer and cause a denial of service.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-0798?
CVE-2023-0798 is a vulnerability in LibTIFF 4.4.0 that allows attackers to cause a denial-of-service by exploiting an out-of-bounds read in the tiffcrop utility.
How severe is CVE-2023-0798?
CVE-2023-0798 has a severity level of medium (4) based on the severity value assigned by the vulnerability assessment.
How can an attacker exploit CVE-2023-0798?
An attacker can exploit CVE-2023-0798 by crafting a malicious tiff file and using it to trigger the out-of-bounds read in the tiffcrop utility, resulting in a denial-of-service.
How can I fix CVE-2023-0798?
To fix CVE-2023-0798, users that compile libtiff from sources should apply the fix with commit afaabc3e.
Where can I find more information about CVE-2023-0798?
You can find more information about CVE-2023-0798 on the GitLab links provided: [Commit](https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68) and [Issue](https://gitlab.com/libtiff/libtiff/-/issues/492). Additionally, you can check the Debian security tracker for this vulnerability at [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2023-0798).