REDHAT-BUG-2054495: Medium severity tiff vulnerability

Q: Which deployments are exposed to this issue?

Deployments using libtiff versions from 4.0 through 4.3.0 are affected. Exposure requires processing a crafted TIFF file through the vulnerable directory-reading code.

Q: What does an attacker need to trigger the denial of service?

An attacker needs to provide a crafted TIFF file that reaches TIFFReadDirectory(). The reported outcome is a denial of service caused by a null source pointer being passed to memcpy().

Q: What can be done if libtiff is built from source?

Apply commit 561599c99f987dc32ae110370cfdd7df7975586b when compiling libtiff from source. This commit is identified as the available fix.

Published Feb 15, 2022

Updated

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.

https://gitlab.com/libtiff/libtiff/-/issues/362 https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff/-/commit/561599c99f987dc32ae110370cfdd7df7975586b https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0562.json

Affected Software

1 affected component

LibTIFF libtiff>=4.0<4.3.0

Event History

Feb 15, 2022

Data Sourced

via Red Hat·04:41 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments using libtiff versions from 4.0 through 4.3.0 are affected. Exposure requires processing a crafted TIFF file through the vulnerable directory-reading code.

What does an attacker need to trigger the denial of service?

An attacker needs to provide a crafted TIFF file that reaches TIFFReadDirectory(). The reported outcome is a denial of service caused by a null source pointer being passed to memcpy().

What can be done if libtiff is built from source?

Apply commit 561599c99f987dc32ae110370cfdd7df7975586b when compiling libtiff from source. This commit is identified as the available fix.

REDHAT-BUG-2054495: Medium severity tiff vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to trigger the denial of service?

What can be done if libtiff is built from source?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to trigger the denial of service?

What can be done if libtiff is built from source?