Buffer overflow in LibTIFF - CVE-2015-8683

Vulnerability identifier: #VU32278

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-8683

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.

LibTIFF
tiff (Alpine package)
libtiff3
tiff
libtiff3-32bit
tiff-debuginfo
tiff-debugsource
libtiff
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
Slackware Linux

Install update from vendor's website.

tiff (Alpine package) - addressed in versions 4.0.6-r1, 4.0.6-r2, 4.0.6-r3
libtiff3 - update to 3.8.2-141.169.34.1
tiff - update to 3.8.2-141.169.34.1
libtiff3-32bit - update to 3.8.2-141.169.34.1
tiff-debuginfo - update to 3.8.2-141.169.34.1
tiff-debugsource - update to 3.8.2-141.169.34.1
libtiff - update to 4.0.7

• http://rhn.redhat.com/errata/RHSA-2016-1546.html
• http://rhn.redhat.com/errata/RHSA-2016-1547.html
• http://www.debian.org/security/2016/dsa-3467
• http://www.openwall.com/lists/oss-security/2015/12/25/1
• http://www.openwall.com/lists/oss-security/2015/12/26/1
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
• http://www.securityfocus.com/bid/79718
• http://www.securitytracker.com/id/1035508
• http://www.ubuntu.com/usn/USN-2939-1
• https://security.gentoo.org/glsa/201701-16

• Buffer overflow in LibTIFF
• Buffer overflow in tiff (Alpine package)
• SUSE update for tiff
• Slackware Linux update for libtiff