USN-3602-1: LibTIFF vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libtiff-toolsto a version that resolves this vulnerability.Fixed in 4.0.6-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/libtiff5to a version that resolves this vulnerability.Fixed in 4.0.6-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/libtiff-toolsto a version that resolves this vulnerability.Fixed in 4.0.3-7ubuntu0.8 - Upgrade
Upgrade
ubuntu/libtiff5to a version that resolves this vulnerability.Fixed in 4.0.3-7ubuntu0.8
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-3602-1?
The severity of USN-3602-1 is high due to the potential for denial of service and arbitrary code execution.
How do I fix USN-3602-1?
To fix USN-3602-1, upgrade to the patched version of libtiff-tools or libtiff5 as specified in the advisory.
What versions are affected by USN-3602-1?
USN-3602-1 affects libtiff-tools and libtiff5 versions prior to 4.0.6-1ubuntu0.3 for Ubuntu 16.04 and prior to 4.0.3-7ubuntu0.8 for Ubuntu 14.04.
What exploits are associated with USN-3602-1?
Exploits associated with USN-3602-1 can lead to application crashes or allow attackers to execute arbitrary code through specially crafted images.
Is there a workaround for USN-3602-1?
There are no specific workarounds for USN-3602-1; upgrading to the secure versions is the recommended mitigation.