Heap-based buffer overflow in LibTIFF - CVE-2022-3570

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU68814

Heap-based buffer overflow in LibTIFF - CVE-2022-3570

Published: October 28, 2022 / Updated: May 9, 2023


Vulnerability identifier: #VU68814
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3570
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in tiffcrop.c utility in libtiff when processing TIFF files. A remote attacker can pass specially crafted file to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

LibTIFF
Oracle Linux
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
Ubuntu
openEuler
Data Lakehouse
IBM Cloud Pak for Security
IBM Cloud Pak for Business Automation
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
QRadar Suite
Business Automation Insights
Tanzu Greenplum for Kubernetes
Dell PowerProtect Cyber Recovery
libtiff-tools (Ubuntu package)
libtiff5-debuginfo
libtiff-devel
tiff-debuginfo
tiff-debugsource
libtiff5
libtiff5-debuginfo-32bit
libtiff5-32bit
tiff
tiff (Debian package)
libtiff-debuginfo
libtiff-debugsource
libtiff
libtiff-help
libtiff (Red Hat package)
VMware Tanzu Operations Manager
HPE Moonshot 1500 Chassis Manager
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
RecoverPoint for VMs

How to mitigate CVE-2022-3570

Install update from vendor's website.

Data Lakehouse - update to 1.1.0.0
IBM Cloud Pak for Security - update to 1.11.3.0
QRadar Suite - update to 1.11.3.0
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF005, 24.0.1-IF004, 25.0.0
Business Automation Insights - update to 24.0.1.0.4
libtiff-tools (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.0.9-5ubuntu0.8, 4.1.0+git191117-2ubuntu0.20.04.6, 4.3.0-6ubuntu0.2, 4.4.0-4ubuntu3.1
Tanzu Greenplum for Kubernetes - update to 2.0.0
VMware Tanzu Operations Manager - addressed in versions 2.7.25, 2.8.16, 2.9.12, 2.10.39
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
libtiff5-debuginfo - update to 4.0.9-44.62.1
libtiff-devel - update to 4.0.9-44.62.1
tiff-debuginfo - update to 4.0.9-44.62.1
tiff-debugsource - update to 4.0.9-44.62.1
libtiff5 - update to 4.0.9-44.62.1
libtiff5-debuginfo-32bit - update to 4.0.9-44.62.1
libtiff5-32bit - update to 4.0.9-44.62.1
tiff - update to 4.0.9-44.62.1
tiff (Debian package) - update to 4.2.0-1+deb11u3
libtiff-debuginfo - update to 4.3.0-6
libtiff-debugsource - update to 4.3.0-6
libtiff - update to 4.3.0-6
libtiff-devel - update to 4.3.0-6
libtiff-help - update to 4.3.0-6
libtiff - update to 4.4.0-4
libtiff (Red Hat package) - update to 4.4.0-7.el9
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.8.3
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
App Connect Enterprise Certified Container - addressed in versions 5.0.9, 9.1.0
RecoverPoint for VMs - update to 6.0.SP1.P1
Dell PowerProtect Cyber Recovery - update to 19.14.0.1

External References

Related Security Bulletins