CVE-2022-2953 - libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c

Back Back to CVE browser

MEDIUM

libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c

Published Aug 29, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.57%

Description

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8.

Affected products

Vendor Libtiff Product Libtiff Default
n/a
- Version
  <=4.4.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Libtiff

n/a

Version	Status	Constraints
<=4.4.0	affected	-

Red Hat Enterprise Linux 8

libtiff-0:4.0.9-26.el8_7

Fixed · RHSA-2023:0095
Red Hat Enterprise Linux 9

libtiff-0:4.4.0-5.el9_1

Fixed · RHSA-2023:0302
Red Hat Enterprise Linux 6

libtiff

Out of support scope
Red Hat Enterprise Linux 7

compat-libtiff3

Out of support scope
Red Hat Enterprise Linux 7

libtiff

Out of support scope
Red Hat Enterprise Linux 8

compat-libtiff3

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	libtiff-0:4.0.9-26.el8_7	Fixed	RHSA-2023:0095
Red Hat Enterprise Linux 9	libtiff-0:4.4.0-5.el9_1	Fixed	RHSA-2023:0302
Red Hat Enterprise Linux 6	libtiff	Out of support scope	n/a
Red Hat Enterprise Linux 7	compat-libtiff3	Out of support scope	n/a
Red Hat Enterprise Linux 7	libtiff	Out of support scope	n/a
Red Hat Enterprise Linux 8	compat-libtiff3	Will not fix	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-125

Out-of-bounds Read

References (9)

https://access.redhat.com/security/cve/CVE-2022-2953
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2134432
Issue Tracking
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2953.json
ExploitIssue TrackingPatchVDB Entry
https://gitlab.com/libtiff/libtiff/-/commit/48d6ece8389b01129e7d357f0985c8f938ce3da3
Patch
https://gitlab.com/libtiff/libtiff/-/issues/414
ExploitIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2953
https://security.netapp.com/advisory/ntap-20221014-0008/
Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-2953
https://www.debian.org/security/2023/dsa-5333
vendor-advisoryThird Party Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-2953		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2134432		Issue Tracking
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2953.json		ExploitIssue TrackingPatchVDB Entry
https://gitlab.com/libtiff/libtiff/-/commit/48d6ece8389b01129e7d357f0985c8f938ce3da3		Patch
https://gitlab.com/libtiff/libtiff/-/issues/414		ExploitIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2953
https://security.netapp.com/advisory/ntap-20221014-0008/		Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-2953
https://www.debian.org/security/2023/dsa-5333		vendor-advisoryThird Party Advisory