Security update for tiff SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0480-1 Final 1 1 2022-02-17T14:11:19Z current 2022-02-17T14:11:19Z 2022-02-17T14:11:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tiff This update for tiff fixes the following issues: - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031). - CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365). - CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312). - CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808). - CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809). - CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811). - CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812). - CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2022-480,openSUSE-SLE-15.4-2022-480 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ E-Mail link for openSUSE-SU-2022:0480-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1071031 SUSE Bug 1071031 https://bugzilla.suse.com/1154365 SUSE Bug 1154365 https://bugzilla.suse.com/1182808 SUSE Bug 1182808 https://bugzilla.suse.com/1182809 SUSE Bug 1182809 https://bugzilla.suse.com/1182811 SUSE Bug 1182811 https://bugzilla.suse.com/1182812 SUSE Bug 1182812 https://bugzilla.suse.com/1190312 SUSE Bug 1190312 https://bugzilla.suse.com/1194539 SUSE Bug 1194539 https://www.suse.com/security/cve/CVE-2017-17095/ SUSE CVE CVE-2017-17095 page https://www.suse.com/security/cve/CVE-2019-17546/ SUSE CVE CVE-2019-17546 page https://www.suse.com/security/cve/CVE-2020-19131/ SUSE CVE CVE-2020-19131 page https://www.suse.com/security/cve/CVE-2020-35521/ SUSE CVE CVE-2020-35521 page https://www.suse.com/security/cve/CVE-2020-35522/ SUSE CVE CVE-2020-35522 page https://www.suse.com/security/cve/CVE-2020-35523/ SUSE CVE CVE-2020-35523 page https://www.suse.com/security/cve/CVE-2020-35524/ SUSE CVE CVE-2020-35524 page https://www.suse.com/security/cve/CVE-2022-22844/ SUSE CVE CVE-2022-22844 page openSUSE Leap 15.3 libtiff-devel-4.0.9-45.5.1 libtiff-devel-32bit-4.0.9-45.5.1 libtiff5-4.0.9-45.5.1 libtiff5-32bit-4.0.9-45.5.1 tiff-4.0.9-45.5.1 libtiff-devel-4.0.9-45.5.1 as a component of openSUSE Leap 15.3 libtiff-devel-32bit-4.0.9-45.5.1 as a component of openSUSE Leap 15.3 libtiff5-4.0.9-45.5.1 as a component of openSUSE Leap 15.3 libtiff5-32bit-4.0.9-45.5.1 as a component of openSUSE Leap 15.3 tiff-4.0.9-45.5.1 as a component of openSUSE Leap 15.3 tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file. CVE-2017-17095 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2017-17095.html CVE-2017-17095 https://bugzilla.suse.com/1071031 SUSE Bug 1071031 tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition. CVE-2019-17546 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2019-17546.html CVE-2019-17546 https://bugzilla.suse.com/1154365 SUSE Bug 1154365 Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop". CVE-2020-19131 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2020-19131.html CVE-2020-19131 https://bugzilla.suse.com/1190312 SUSE Bug 1190312 A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service. CVE-2020-35521 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2020-35521.html CVE-2020-35521 https://bugzilla.suse.com/1182808 SUSE Bug 1182808 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack. CVE-2020-35522 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2020-35522.html CVE-2020-35522 https://bugzilla.suse.com/1182809 SUSE Bug 1182809 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35523 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2020-35523.html CVE-2020-35523 https://bugzilla.suse.com/1182811 SUSE Bug 1182811 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35524 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2020-35524.html CVE-2020-35524 https://bugzilla.suse.com/1182812 SUSE Bug 1182812 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. CVE-2022-22844 openSUSE Leap 15.3:libtiff-devel-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff-devel-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-32bit-4.0.9-45.5.1 openSUSE Leap 15.3:libtiff5-4.0.9-45.5.1 openSUSE Leap 15.3:tiff-4.0.9-45.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/ https://www.suse.com/security/cve/CVE-2022-22844.html CVE-2022-22844 https://bugzilla.suse.com/1194539 SUSE Bug 1194539