Heap-based buffer overflow in LibTIFF - CVE-2023-3164

Vulnerability identifier: #VU79330

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3164

CWE-ID: CWE-122

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error in the extractImageSection() function in tools/tiffcrop.c. A local attacker can trick the victim into opening a specially crafted data, trigger a heap-based buffer overflow and perform a denial of service attack.

LibTIFF
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Ubuntu
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
libtiff5 (Ubuntu package)
libtiff-tools (Ubuntu package)
libtiff-devel
tiff-debuginfo
tiff-debugsource
libtiff5
libtiff5-debuginfo
libtiff5-32bit-debuginfo
libtiff5-32bit
tiff
libtiff-devel-32bit
libtiff-help
libtiff-debuginfo
libtiff-debugsource
libtiff
libtiff6 (Ubuntu package)
App Connect Enterprise Certified Container
Datacap

Install updates from vendor's website.

LibTIFF - update to 4.5.1
libtiff5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.1.0+git191117-2ubuntu0.20.04.13, 4.3.0-6ubuntu0.9
libtiff-tools (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.1.0+git191117-2ubuntu0.20.04.13, 4.3.0-6ubuntu0.9, 4.5.1+git230720-1ubuntu1.2, 4.5.1+git230720-4ubuntu2.1
libtiff-devel - update to 4.0.9-150000.45.44.1
tiff-debuginfo - update to 4.0.9-150000.45.44.1
tiff-debugsource - update to 4.0.9-150000.45.44.1
libtiff5 - update to 4.0.9-150000.45.44.1
libtiff5-debuginfo - update to 4.0.9-150000.45.44.1
libtiff5-32bit-debuginfo - update to 4.0.9-150000.45.44.1
libtiff5-32bit - update to 4.0.9-150000.45.44.1
tiff - update to 4.0.9-150000.45.44.1
libtiff-devel-32bit - update to 4.0.9-150000.45.44.1
libtiff-help - update to 4.3.0-23
libtiff-devel - update to 4.3.0-23
libtiff-debuginfo - update to 4.3.0-23
libtiff-debugsource - update to 4.3.0-23
libtiff - update to 4.3.0-23
libtiff6 (Ubuntu package) - addressed in versions 4.5.1+git230720-1ubuntu1.2, 4.5.1+git230720-4ubuntu2.1
App Connect Enterprise Certified Container - addressed in versions 5.0.9, 9.1.0
Datacap - update to 9.1.9.0.4

• https://www.ibm.com/support/pages/node/7014999

• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in IBM Datacap
• openEuler update for libtiff
• Ubuntu update for tiff
• SUSE update for tiff
• SUSE update for tiff