NULL pointer dereference in LibTIFF - CVE-2024-7006

Vulnerability identifier: #VU96001

CSH Severity: Medium

CVSS v4 BT: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-7006

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in tif_dirinfo.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

LibTIFF
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Ubuntu
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
openEuler
Fedora
RecoverPoint for Virtual Machines
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libtiffxx5 (Ubuntu package)
libtiff5 (Ubuntu package)
libtiff-tools (Ubuntu package)
libtiff-opengl (Ubuntu package)
libtiff (Red Hat package)
libtiff5-debuginfo
libtiff5-32bit
libtiff5-debuginfo-32bit
tiff
libtiff5
tiff-debuginfo
tiff-debugsource
libtiff-devel
libtiff5-32bit-debuginfo
libtiff-devel-32bit
libtiff-help
libtiff
libtiff-debuginfo
libtiff-debugsource
libtiff-tools
libtiff-static
libtiff-doc
libtiff6 (Ubuntu package)
libtiff6-64bit-debuginfo
libtiff6-32bit
libtiff6-32bit-debuginfo
libtiff6
libtiff6-debuginfo
libtiff6-64bit
libtiff-devel-64bit
Juniper Junos Space
Business Automation Insights
IBM Cloud Pak for Watson AIOps
IBM Observability with Instana
IBM Cloud Pak for Security
Red Hat OpenShift Dev Spaces
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Cloud Pak for Business Automation
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform

Install update from vendor's website.

RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Juniper Junos Space - update to 24.1R3
Business Automation Insights - update to 24.0.0.0.2
IBM Observability with Instana - update to 286
libtiffxx5 (Ubuntu package) - update to Ubuntu Pro
libtiff5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.1.0+git191117-2ubuntu0.20.04.14, 4.3.0-6ubuntu0.10
libtiff-tools (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libtiff-opengl (Ubuntu package) - update to Ubuntu Pro
Migration Toolkit for Containers - update to 1.8.5
IBM Cloud Pak for Security - update to 1.11.0.0
IBM Cloud Pak for Multicloud Management - update to 2.3 FP11
Red Hat OpenShift Dev Spaces - update to 3.17.0
libtiff (Red Hat package) - addressed in versions 4.0.9-33.el8_10, 4.4.0-8.el9_2.1, 4.4.0-12.el9_4.1
libtiff5-debuginfo - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1
libtiff5-32bit - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1
libtiff5-debuginfo-32bit - update to 4.0.9-44.86.1
tiff - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1, 4.6.0-150600.3.3.1
libtiff5 - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1
tiff-debuginfo - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1, 4.6.0-150600.3.3.1
tiff-debugsource - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1, 4.6.0-150600.3.3.1
libtiff-devel - addressed in versions 4.0.9-44.86.1, 4.0.9-150000.45.47.1, 4.6.0-150600.3.3.1
libtiff5-32bit-debuginfo - update to 4.0.9-150000.45.47.1
libtiff-devel-32bit - addressed in versions 4.0.9-150000.45.47.1, 4.6.0-150600.3.3.1
libtiff-help - addressed in versions 4.3.0-24, 4.3.0-38, 4.6.0-3
libtiff-devel - addressed in versions 4.3.0-24, 4.3.0-38, 4.6.0-3
libtiff - addressed in versions 4.3.0-24, 4.3.0-38, 4.6.0-3
libtiff-debuginfo - addressed in versions 4.3.0-24, 4.3.0-38, 4.6.0-3
libtiff-debugsource - addressed in versions 4.3.0-24, 4.3.0-38, 4.6.0-3
libtiff-tools - addressed in versions 4.3.0-38, 4.6.0-3
libtiff-static - addressed in versions 4.3.0-38, 4.6.0-3
libtiff-tools - update to 4.4.0-12.0.3
libtiff - update to 4.4.0-12.0.3
libtiff-devel - update to 4.4.0-12.0.3
libtiff-static - update to 4.4.0-12.0.3
libtiff-doc - update to 4.4.0-12.0.3
libtiff6 (Ubuntu package) - update to 4.5.1+git230720-4ubuntu2.2
libtiff - addressed in versions 4.6.0-5.fc40.1, 4.6.0-6.fc41, 4.6.0-6.fc42
libtiff6-64bit-debuginfo - update to 4.6.0-150600.3.3.1
libtiff6-32bit - update to 4.6.0-150600.3.3.1
libtiff6-32bit-debuginfo - update to 4.6.0-150600.3.3.1
libtiff6 - update to 4.6.0-150600.3.3.1
libtiff6-debuginfo - update to 4.6.0-150600.3.3.1
libtiff6-64bit - update to 4.6.0-150600.3.3.1
libtiff-devel-64bit - update to 4.6.0-150600.3.3.1
IBM Cloud Pak for Watson AIOps - update to 4.8.1
IBM Watson Discovery for IBM Cloud Pak for Data - addressed in versions 4.8.8, 5.1.0
Red Hat OpenShift Container Platform - addressed in versions 4.14.41, 4.15.38, 4.16.12, 4.17.4
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1

• https://bugzilla.redhat.com/show_bug.cgi?id=2302996
• https://gitlab.com/libtiff/libtiff/-/merge_requests/559
• https://gitlab.com/libtiff/libtiff/-/issues/624

• Denial of service in Libtiff
• Fedora 42 update for libtiff
• Fedora 41 update for libtiff
• openEuler 24.03 LTS update for libtiff
• SUSE update for tiff
• openEuler 22.03 LTS SP3 update for libtiff
• openEuler 20.03 LTS SP4 update for libtiff
• openEuler 22.03 LTS SP1 update for libtiff
• openEuler 22.03 LTS SP4 update for libtiff
• SUSE update for tiff
• SUSE update for tiff
• Ubuntu update for tiff
• Ubuntu update for tiff
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Red Hat Enterprise Linux 9 update for libtiff
• Fedora 40 update for libtiff
• Red Hat Enterprise Linux 8 update for libtiff
• Red Hat Enterprise Linux 9 update for libtiff
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in IBM Cloud Pak for Security
• IBM Watson Discovery for IBM Cloud Pak for Data update for LibTIFF
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Business Automation Insights
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Anolis OS update for libtiff
• Junos Space update for third-party components
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management