REDHAT-BUG-2251344: Medium severity LibTIFF libtiff vulnerability
A Segment fault (SEGV) problem was found in libtiff that could be triggered by passing a craft tiff file to TIFFReadRGBATileExt() API. In this flaw a remote attackers could cause a Heap-buffer-overflow problem leading to a denial of service.
Reference: https://gitlab.com/libtiff/libtiff/-/issues/622
Fixed at: https://gitlab.com/libtiff/libtiff/-/mergerequests/546
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2251344?
The severity of REDHAT-BUG-2251344 is high due to the potential for a heap-buffer-overflow leading to denial of service.
How can I fix REDHAT-BUG-2251344?
Fixing REDHAT-BUG-2251344 involves updating to the latest version of the LibTIFF library that addresses this specific security flaw.
What impact does REDHAT-BUG-2251344 have on my system?
The impact of REDHAT-BUG-2251344 includes the possibility of remote attackers causing a crash or denial of service on systems using affected versions of libtiff.
Who is affected by REDHAT-BUG-2251344?
Users and applications utilizing the libtiff library for image processing, particularly those handling TIFF files, are affected by REDHAT-BUG-2251344.
Is there a workaround for REDHAT-BUG-2251344?
A workaround for REDHAT-BUG-2251344 may involve restricting access to the TIFF files or implementing additional monitoring to prevent exploitation until a patch can be applied.