REDHAT-BUG-2251344
First published: Fri Nov 24 2023(Updated: )
A Segment fault (SEGV) problem was found in libtiff that could be triggered by passing a craft tiff file to TIFFReadRGBATileExt() API. In this flaw a remote attackers could cause a Heap-buffer-overflow problem leading to a denial of service. Reference: <a href="https://gitlab.com/libtiff/libtiff/-/issues/622">https://gitlab.com/libtiff/libtiff/-/issues/622</a> Fixed at: <a href="https://gitlab.com/libtiff/libtiff/-/merge_requests/546">https://gitlab.com/libtiff/libtiff/-/merge_requests/546</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libtiff |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gitlab.com/libtiff/libtiff/-/issues/622
- https://gitlab.com/libtiff/libtiff/-/merge_requests/546
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2250332
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2250319
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2260111
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2260112
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2260110
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2260113
- https://access.redhat.com/errata/RHSA-2024:5079
- https://bugzilla.redhat.com/show_bug.cgi?id=2251344
Frequently Asked Questions
What is the severity of REDHAT-BUG-2251344?
The severity of REDHAT-BUG-2251344 is high due to the potential for a heap-buffer-overflow leading to denial of service.
How can I fix REDHAT-BUG-2251344?
Fixing REDHAT-BUG-2251344 involves updating to the latest version of the LibTIFF library that addresses this specific security flaw.
What impact does REDHAT-BUG-2251344 have on my system?
The impact of REDHAT-BUG-2251344 includes the possibility of remote attackers causing a crash or denial of service on systems using affected versions of libtiff.
Who is affected by REDHAT-BUG-2251344?
Users and applications utilizing the libtiff library for image processing, particularly those handling TIFF files, are affected by REDHAT-BUG-2251344.
Is there a workaround for REDHAT-BUG-2251344?
A workaround for REDHAT-BUG-2251344 may involve restricting access to the TIFF files or implementing additional monitoring to prevent exploitation until a patch can be applied.
- agent/severity
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-52356
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libtiff
- canonical/libtiff