CVE-2020-35524

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.(CVE-2020-35521)

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.(CVE-2020-35522)

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35523)

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35524)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

• libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

• libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

• libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521)

• libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

• libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

• libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

• libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521)

• libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

The updated libtiff packages fix security vulnerabilities:

• Integer overflow in tif_getimage.c (CVE-2020-35523).
• Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524).
• Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the “TIFFVGetField” funtion in the component ‘libtiff/tif_dir.c’. (CVE-2020-19143)
• Memory allocation failure in tiff2rgba (CVE-2020-35521)
• Memory allocation failure in tiff2rgba (CVE-2020-35522)

This update for tiff fixes the following issues:

• CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
• CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
• CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
• CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
• CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
• CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
• CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
• CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).

These are all security issues fixed in the libtiff-devel-32bit-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

This update for tiff fixes the following issues:

• CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
• CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
• CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
• CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
• CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
• CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
• CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
• CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).

This update for tiff fixes the following issues:

• CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
• CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
• CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
• CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
• CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
• CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
• CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
• CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).

This update for tiff fixes the following issues:

• CVE-2015-8683: Fixed out-of-bounds when reading CIE Lab image format files (bsc#1156754).
• CVE-2015-8665: Fixed out-of-bounds read in tif_getimage.c (bsc#1156749).
• CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
• CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
• CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
• CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. This issue was only fixed in Ubuntu 14.04 ESM. (CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524, CVE-2022-3970)

It was discovered that LibTIFF was incorrectly acessing a data structure when processing data with the tiffcrop tool, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-48281)