USN-6512-1: LibTIFF vulnerabilities
It was discovered that LibTIFF could be made to run into an infinite loop. If a user or an automated system were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. (CVE-2022-40090) It was discovered that LibTIFF could be made leak memory. If a user or an automated system were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. (CVE-2023-3576)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-6512-1.
What is the severity of the LibTIFF vulnerabilities?
The severity of the LibTIFF vulnerabilities is not mentioned in the provided information.
How can the LibTIFF vulnerabilities be exploited?
The LibTIFF vulnerabilities can be exploited by tricking a user or automated system into opening a specially crafted image file, which may lead to a denial of service.
Which versions of Ubuntu are affected by the LibTIFF vulnerabilities?
The LibTIFF vulnerabilities affect Ubuntu versions 22.04, 20.04, 18.04, 16.04, and 14.04.
How do I fix the LibTIFF vulnerabilities?
To fix the LibTIFF vulnerabilities, you should update the libtiff-tools and libtiff5 packages to the specified versions provided in the Ubuntu security advisory.