SUSE-SU-2022:3690-1

Опубликовано: 21 окт. 2022

Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues:

CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).
CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).
CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).
CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).
CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).
CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).
CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).

Список пакетов

Container suse/nginx:latest

libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAPCAL-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAPCAL-EC2-HVM

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAPCAL-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-EC2-HVM

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP2-SAP-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAPCAL-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP3-SAPCAL-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-Hardened-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAPCAL

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAPCAL-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAPCAL-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SAPCAL-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Azure-3P

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAPCAL-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAPCAL-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP5-SAPCAL-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP6-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.16.1

SUSE Enterprise Storage 6

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Enterprise Storage 7

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Micro 5.2

libtiff5-4.0.9-150000.45.16.1

SUSE Linux Enterprise Micro 5.3

libtiff5-4.0.9-150000.45.16.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP3

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Module for Package Hub 15 SP3

libtiff5-32bit-4.0.9-150000.45.16.1

tiff-4.0.9-150000.45.16.1

SUSE Linux Enterprise Module for Package Hub 15 SP4

tiff-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server 15 SP1-BCL

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server 15 SP2-BCL

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server 15-LTSS

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server for SAP Applications 15

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Manager Proxy 4.1

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Manager Retail Branch Server 4.1

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

SUSE Manager Server 4.1

libtiff-devel-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

openSUSE Leap 15.3

libtiff-devel-4.0.9-150000.45.16.1

libtiff-devel-32bit-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

tiff-4.0.9-150000.45.16.1

openSUSE Leap 15.4

libtiff-devel-4.0.9-150000.45.16.1

libtiff-devel-32bit-4.0.9-150000.45.16.1

libtiff5-4.0.9-150000.45.16.1

libtiff5-32bit-4.0.9-150000.45.16.1

tiff-4.0.9-150000.45.16.1

openSUSE Leap Micro 5.2

libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223690-1/
Link for SUSE-SU-2022:3690-1
https://lists.suse.com/pipermail/sle-security-updates/2022-October/012599.html
E-Mail link for SUSE-SU-2022:3690-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1201723
SUSE Bug 1201723
https://bugzilla.suse.com/1201971
SUSE Bug 1201971
https://bugzilla.suse.com/1202026
SUSE Bug 1202026
https://bugzilla.suse.com/1202466
SUSE Bug 1202466
https://bugzilla.suse.com/1202467
SUSE Bug 1202467
https://bugzilla.suse.com/1202468
SUSE Bug 1202468
https://bugzilla.suse.com/1202968
SUSE Bug 1202968
https://bugzilla.suse.com/1202971
SUSE Bug 1202971
https://bugzilla.suse.com/1202973
SUSE Bug 1202973
https://www.suse.com/security/cve/CVE-2022-0561/
SUSE CVE CVE-2022-0561 page
https://www.suse.com/security/cve/CVE-2022-2519/
SUSE CVE CVE-2022-2519 page
https://www.suse.com/security/cve/CVE-2022-2520/
SUSE CVE CVE-2022-2520 page
https://www.suse.com/security/cve/CVE-2022-2521/
SUSE CVE CVE-2022-2521 page
https://www.suse.com/security/cve/CVE-2022-2867/
SUSE CVE CVE-2022-2867 page
https://www.suse.com/security/cve/CVE-2022-2868/
SUSE CVE CVE-2022-2868 page
https://www.suse.com/security/cve/CVE-2022-2869/
SUSE CVE CVE-2022-2869 page
https://www.suse.com/security/cve/CVE-2022-34266/
SUSE CVE CVE-2022-34266 page

Описание

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-0561.html
CVE-2022-0561
https://bugzilla.suse.com/1195964
SUSE Bug 1195964

Описание

There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2519.html
CVE-2022-2519
https://bugzilla.suse.com/1202968
SUSE Bug 1202968
https://bugzilla.suse.com/1205505
SUSE Bug 1205505

Описание

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2520.html
CVE-2022-2520
https://bugzilla.suse.com/1202973
SUSE Bug 1202973

Описание

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2521.html
CVE-2022-2521
https://bugzilla.suse.com/1202971
SUSE Bug 1202971
https://bugzilla.suse.com/1205505
SUSE Bug 1205505

Описание

libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2867.html
CVE-2022-2867
https://bugzilla.suse.com/1202466
SUSE Bug 1202466

Описание

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2868.html
CVE-2022-2868
https://bugzilla.suse.com/1202467
SUSE Bug 1202467

Описание

libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2869.html
CVE-2022-2869
https://bugzilla.suse.com/1202468
SUSE Bug 1202468

Описание

The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset() function within TIFFFetchStripThing() in tif_dirread.c. This will cause TIFFFetchStripThing() to segfault after use of an uninitialized resource.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-34266.html
CVE-2022-34266
https://bugzilla.suse.com/1201723
SUSE Bug 1201723
https://bugzilla.suse.com/1208311
SUSE Bug 1208311

Описание

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.16.1

Container suse/rmt-nginx:latest:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-34526.html
CVE-2022-34526
https://bugzilla.suse.com/1202026
SUSE Bug 1202026
https://bugzilla.suse.com/1205073
SUSE Bug 1205073
https://bugzilla.suse.com/1205505
SUSE Bug 1205505
https://bugzilla.suse.com/1208338
SUSE Bug 1208338