Slackware Linux update for libtiff

1) Out-of-bounds read

EUVDB-ID: #VU32174

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2014-8127

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition within the tif_dir.c function in the thumbnail tool, (2) compresscontig function file. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and crash the affected application.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU32276

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2015-8665

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Buffer overflow

EUVDB-ID: #VU32278

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2015-8683

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Division by zero

EUVDB-ID: #VU32169

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-3622

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to divide-by-zero error within The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier. A remote attacker can perform a denial of service (divide-by-zero error) via a crafted TIFF image.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Division by zero

EUVDB-ID: #VU32170

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-3623

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to divide-by-zero error within The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier. A remote attacker can perform a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Out-of-bounds read

EUVDB-ID: #VU32173

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-3658

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Buffer overflow

EUVDB-ID: #VU32178

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-5321

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Division by zero

EUVDB-ID: #VU32179

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-5323

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to divide-by-zero error within The _TIFFFax3fillruns function in libtiff before 4.0.6. A remote attacker can perform a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Remote code execution

EUVDB-ID: #VU1066

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2016-5652

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote unauthenticated user to execute arbitrary code execution om the target system.
The weakness exists due to improper handling of compressed, TIFF images. By convincing the victim to open a file with specially crafted TIFF images, attackers can trigger a heap-buffer overflow and execute arbitrary code.
Successful exploitation of the vulnerability results in arbitrary code execution.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Out-of-bounds read

EUVDB-ID: #VU32102

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2016-9273

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) NULL pointer dereference

EUVDB-ID: #VU32167

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-9448

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297. A remote attacker can perform a denial of service (DoS) attack.

Mitigation

Update the affected package libtiff.

Vulnerable software versions

Slackware Linux: 14.2

libtiff: All versions

CPE2.3

• cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
• cpe:2.3:a:slackware:libtiff:*:*:*:*:*:slackware_linux:*:*

External links

https://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.395195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.