Out-of-bounds write in LibTIFF - CVE-2023-0803

Vulnerability identifier: #VU72600

CSH Severity: Medium

CVSS v4 BT: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-0803

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the tiffcrop() function in tools/tiffcrop.c. A remote attacker can pass a specially crafted TIFF file to the application, trigger an out-of-bounds write and perform a denial of service (DoS) attack.

LibTIFF
Debian Linux
Amazon Linux AMI
Oracle Linux
Gentoo Linux
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Oracle Solaris
Ubuntu
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Migration Toolkit for Runtimes
Data Lakehouse
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
OpenShift Logging
Red Hat Migration Toolkit for Applications
Isolation Segment
VMware Tanzu Application Service for VMs
IBM Security Verify Governance
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
IBM Cloud Pak for Watson AIOps
Robotic Process Automation for Cloud Pak
cflinuxfs3
Dell PowerProtect Cyber Recovery
libtiff-tools (Ubuntu package)
libtiff5 (Ubuntu package)
libtiff
libtiff (Red Hat package)
tiff-debugsource
libtiff5-debuginfo-32bit
libtiff5-32bit
libtiff5-debuginfo
libtiff5
tiff-debuginfo
libtiff-devel
tiff
libtiff5-32bit-debuginfo
libtiff-devel-32bit
tiff (Debian package)
libtiff-help
libtiff-debuginfo
libtiff-debugsource
media-libs/tiff
VMware Tanzu Operations Manager
EMC ViPR SRM
Dell EMC Storage Monitoring and Reporting (SMR)
RecoverPoint for VMs

Install updates from vendor's repository.

Data Lakehouse - update to 1.1.0.0
Migration Toolkit for Containers - addressed in versions 1.7.13, 1.8.0
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - update to 2.6.8
OpenShift Logging - addressed in versions 5.6.12, 5.7.7
Red Hat Migration Toolkit for Applications - update to 6.1.4
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.11, 23.0.12
libtiff-tools (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.0.9-5ubuntu0.10, 4.1.0+git191117-2ubuntu0.20.04.8, 4.3.0-6ubuntu0.4, 4.4.0-4ubuntu3.3
libtiff5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.0.9-5ubuntu0.10, 4.1.0+git191117-2ubuntu0.20.04.8, 4.3.0-6ubuntu0.4, 4.4.0-4ubuntu3.3
cflinuxfs3 - update to 0.356.0
VMware Tanzu Operations Manager - addressed in versions 2.7.25, 2.8.16, 2.9.12, 2.10.39
Isolation Segment - addressed in versions 2.11.30, 2.12.20, 2.13.15, 3.0.8, 4.0.0
VMware Tanzu Application Service for VMs - addressed in versions 2.11.36, 2.12.25, 2.13.18, 3.0.8, 4.0.0
libtiff - addressed in versions 4.0.3-35.44, 4.4.0-4
libtiff (Red Hat package) - addressed in versions 4.0.9-29.el8_8, 4.4.0-8.el9_2
tiff-debugsource - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
libtiff5-debuginfo-32bit - update to 4.0.9-44.68.1
libtiff5-32bit - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
libtiff5-debuginfo - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
libtiff5 - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
tiff-debuginfo - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
libtiff-devel - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
tiff - addressed in versions 4.0.9-44.68.1, 4.0.9-150000.45.28.1
libtiff5-32bit-debuginfo - update to 4.0.9-150000.45.28.1
libtiff-devel-32bit - update to 4.0.9-150000.45.28.1
tiff (Debian package) - update to 4.2.0-1+deb11u4
libtiff-help - update to 4.3.0-9
libtiff-debuginfo - update to 4.3.0-9
libtiff-devel - update to 4.3.0-9
libtiff-debugsource - update to 4.3.0-9
libtiff - update to 4.3.0-9
libtiff - update to 4.4.0-8.0.1
libtiff-devel - update to 4.4.0-8.0.1
media-libs/tiff - update to 4.5.0-r2
EMC ViPR SRM - update to 4.10.0.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.0
RecoverPoint for VMs - update to 6.0.SP1.P1
IBM Security Verify Governance - update to 10.0.2.0.4
Dell PowerProtect Cyber Recovery - update to 19.14.0.1

• https://gitlab.com/libtiff/libtiff/-/issues/501
• https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json

• Multiple DoS vulnerabilities in LibTIFF
• Debian update for tiff
• Ubuntu update for tiff
• Cloud Foundry Foundation cflinuxfs3 update for LibTIFF
• Multiple vulnerabilities in Oracle Solaris third-party software
• VMware Tanzu products update for LibTIFF
• Gentoo update for LibTIFF
• SUSE update for tiff
• SUSE update for tiff
• Red Hat Enterprise Linux 9 update for libtiff
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Amazon Linux AMI update for libtiff
• Red Hat Enterprise Linux 8 update for libtiff
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1 on RHEL 8
• Multiple vulnerabilities in Migration Toolkit for Applications 6.1
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• openEuler update for libtiff
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Amazon Linux AMI update for libtiff
• Anolis OS update for libtiff
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)