CVE-2023-2908: Libtiff: null pointer dereference in tif_dir.c
A null pointer dereference issue was found in Libtiff's tifdir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.
Other sources
An issue was found in libtiff caused by runtime error: applying zero offset to null pointer leading to undefined behavior or crash.
https://gitlab.com/libtiff/libtiff/-/mergerequests/479 https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f
— Red Hat
LibTIFF is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in tifdir.c. By persuading a victim to open a specially crafted TIFF image file, a remote attacker could exploit this vulnerability to cause the application to crash.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-2908?
CVE-2023-2908 is a null pointer dereference issue found in Libtiff's tif_dir.c file.
How does CVE-2023-2908 impact Libtiff?
CVE-2023-2908 allows an attacker to pass a crafted TIFF image file to the tiffcp utility, triggering a runtime error and causing undefined behavior.
What is the severity of CVE-2023-2908?
CVE-2023-2908 has a severity rating of medium with a CVSS score of 5.5.
How can I fix CVE-2023-2908?
To fix CVE-2023-2908, you should update Libtiff to version 4.5.1 or apply the appropriate security patches provided by your software vendor.
Where can I find more information about CVE-2023-2908?
You can find more information about CVE-2023-2908 on the official Red Hat Security Advisory and Bugzilla pages.