#VU32278 Buffer overflow in LibTIFF - CVE-2015-8683

Vulnerability identifier: #VU32278

Vulnerability risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2015-8683

CWE-ID: CWE-119

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
LibTIFF
Universal components / Libraries / Libraries used by multiple products

Vendor: LibTIFF

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.

Mitigation
Install update from vendor's website.

Vulnerable software versions

LibTIFF: 1:6.0p1-4+deb7u4

---

External links
https://rhn.redhat.com/errata/RHSA-2016-1546.html
https://rhn.redhat.com/errata/RHSA-2016-1547.html
https://www.debian.org/security/2016/dsa-3467
https://www.openwall.com/lists/oss-security/2015/12/25/1
https://www.openwall.com/lists/oss-security/2015/12/26/1
https://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
https://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
https://www.securityfocus.com/bid/79718
https://www.securitytracker.com/id/1035508
https://www.ubuntu.com/usn/USN-2939-1
https://security.gentoo.org/glsa/201701-16

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.