CVE-2023-2731: Null Pointer Dereference
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.
Other sources
LibTIFF is vulnerable to a denial of service, caused by a NULL pointer dereference in Libtiff's LZWDecode() function in the libtiff/tiflzw.c. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to cause the application to crash.
— IBM
NULL Pointer Dereference located at libtiff/tiflzw.c, allowing local attackers to cause a denial of service.
References: https://gitlab.com/libtiff/libtiff/-/issues/548 https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff/-/commit/9be22b639ea69e102d3847dca4c53ef025e9527b
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-2731?
CVE-2023-2731 is a vulnerability in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file that can be exploited by a local attacker to crash or disrupt the program.
How does CVE-2023-2731 impact affected software?
CVE-2023-2731 can cause an affected software to crash or become unresponsive when processing a TIFF format file.
Which software versions are affected by CVE-2023-2731?
The affected software versions include tiff 4.5.0-5ubuntu1.1, tiff 4.5.0-6 and 4.5.1, and libtiff 4.1.0+git191117-2~deb10u4, 4.1.0+git191117-2~deb10u8, 4.2.0-1+deb11u4, 4.5.0, and 4.5.1+git230720-1.
How can I mitigate CVE-2023-2731?
To mitigate CVE-2023-2731, users should update their Libtiff software to version 4.5.0-5ubuntu1.1 or apply the recommended patches provided by the software vendor.
Where can I find more information about CVE-2023-2731?
More information about CVE-2023-2731 can be found on the Red Hat Security Advisory, Bugzilla, and GitHub pages linked in the references.