REDHAT-BUG-1644229: Medium severity tiff vulnerability

Published Oct 30, 2018

Updated

LibTIFF 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tifjbig.c JBIGDecode out-of-bounds write.

Upstream MR:

https://gitlab.com/libtiff/libtiff/mergerequests/38

References:

https://bugs.chromium.org/p/project-zero/issues/detail?id=1697

Affected Software

1 affected component

LibTIFF libtiff

Event History

Oct 30, 2018

Data Sourced

via Red Hat·09:36 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are within the stated affected scope?

The issue is described for LibTIFF 4.0.9 builds with JBIG support enabled. Builds without JBIG enabled are not identified in the provided data.

What must occur for the flaw to be triggered?

LibTIFF must decode JBIG data. The described condition involves arbitrarily sized JBIG content being decoded into a buffer without respecting that buffer's size, resulting in an out-of-bounds write.

REDHAT-BUG-1644229: Medium severity tiff vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are within the stated affected scope?

What must occur for the flaw to be triggered?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are within the stated affected scope?

What must occur for the flaw to be triggered?