遠端 Rocky Linux 8 主機已安裝受到多個弱點影響的套件如 RLSA-2023:0095 公告中所提及。

  - libtiff 4.4.0 版 tiffcrop 中的除以零錯誤允許攻擊者透過建構的 tiff 檔案造成拒絕服務。對於使用原始碼編譯 libtiff 的使用者，可透過 commit f3a5e010 取得修正程式。
    (CVE-2022-2056、CVE-2022-2057、CVE-2022-2058)

  - 在 libtiff 4.4.0rc1 中 tiffcrop.c:8839 的 rotateImage() 中發現雙重釋放或損毀 (CVE-2022-2519)

  - 在 libtiff 4.4.0rc1 中發現一個瑕疵。tiffcrop.c:8621 的 rotateImage() 中存在 sysmalloc 宣告失敗弱點，讀取特製的輸入時，可造成程式損毀。(CVE-2022-2520)

  - 據發現，在 libtiff 4.4.0rc1 中，tiffcrop.c:2522 呼叫的 tif_close.c:131 的 TIFFClose() 中存在無效的指標釋放作業，在處理特製輸入時，可造成程式損毀和拒絕服務。(CVE-2022-2521)

  - libtiff 的 tiffcrop 公用程式有一個 uint32_t 反向溢位，可導致超出邊界讀取和寫入。向 tiffcrop 提供建構檔案的攻擊者 (可能透過誘騙使用者使用特定參數在該檔案上執行 tiffcrop) 可造成當機，在某些情況下，還可造成進一步惡意利用。(CVE-2022-2867)

  - libtiff 的 tiffcrop 公用程式有一個不當輸入驗證缺陷，如果攻擊者能夠向 tiffcrop 提供建構的檔案，則可導致超出邊界讀取並最終造成當機。(CVE-2022-2868)

  - libtiff 的 tiffcrop 工具有一個 uint32_t 反向溢位，會導致 extractContigSamples8bits 常式發生超出邊界讀取和寫入。向 tiffcrop 提供建構檔案的攻擊者可透過誘騙使用者使用 tiffcrop 開啟建構檔案來觸發此缺陷。觸發此缺陷可造成當機或可能進一步惡意利用。(CVE-2022-2869)

  - LibTIFF 4.4.0 的 tools/tiffcrop.c:6905 的 extractImageSection 中存在超出邊界讀取錯誤，攻擊者可以藉此透過建構的 tiff 檔案造成拒絕服務。對於使用原始碼編譯 libtiff 的使用者，可透過 commit 48d6ece8 取得此問題的修正程式。(CVE-2022-2953)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5333 advisory.

    Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in     tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when     processing a crafted TIFF image. For the stable distribution (bullseye), these problems have been fixed in     version 4.2.0-1+deb11u3. We recommend that you upgrade your tiff packages. For the detailed security     status of tiff please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/tiff

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5714-1 advisory.

    It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffcrop. An     attacker could trick a user into processing a specially crafted tiff image file and potentially use this     issue to cause a denial of service. This issue only affected Ubuntu 22.10. (CVE-2022-2519, CVE-2022-2520,     CVE-2022-2521, CVE-2022-2953)

    It was discovered that LibTIFF did not properly perform bounds checking in certain operations when using     tiffcrop. An attacker could trick a user into processing a specially crafted tiff image file and     potentially use this issue to allow for information disclosure or to cause the application to crash. This     issue only affected to Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-2867,     CVE-2022-2868, CVE-2022-2869)

    It was discovered that LibTIFF did not properly perform bounds checking in certain operations when using     tiffsplit. An attacker could trick a user into processing a specially crafted tiff image file and     potentially use this issue to allow for information disclosure or to cause the application to crash. This     issue only affected to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu     22.04 LTS. (CVE-2022-34526)

    Chintan Shah discovered that LibTIFF incorrectly handled memory in certain conditions when using tiffcrop.
    An attacker could trick a user into processing a specially crafted image file and potentially use this     issue to allow for information disclosure or to cause the application to crash. This issue only affected     to Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10.
    (CVE-2022-3570)

    It was discovered that LibTIFF incorrectly handled memory in certain conditions when using tiffcrop. An     attacker could trick a user into processing a specially crafted tiff file and potentially use this issue     to cause a denial of service. This issue only affected to Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04     LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-3598)

    It was discovered that LibTIFF did not properly perform bounds checking in

    certain operations when using tiffcrop. An attacker could trick a user into

    processing a specially crafted tiff image file and potentially use this issue

    to allow for information disclosure or to cause the application to crash. (CVE-2022-3599)

    It was discovered that LibTIFF did not properly perform bounds checking in certain operations when using     tiffcrop. An attacker could trick a user into processing a specially crafted tiff image file and     potentially use this issue to allow for information disclosure or to cause the application to crash. This     issue only affected to Ubuntu 22.10. (CVE-2022-3597, CVE-2022-3626, CVE-2022-3627)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0095 advisory.

  - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
    (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

  - There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1     (CVE-2022-2519)

  - A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input. (CVE-2022-2520)

  - It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input. (CVE-2022-2521)

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
    (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

  - A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability     allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the 'tiffsplit' or     'tiffcrop' utilities. (CVE-2022-34526)

  - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to     trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into     application crash, potential information disclosure or any other context-dependent impact (CVE-2022-3570)

  - LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from     extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
    (CVE-2022-3597)

  - LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604,     allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff     from sources, the fix is available with commit cfbb883b. (CVE-2022-3598)

  - LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers     to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix     is available with commit e8131125. (CVE-2022-3599)

  - LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from     processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
    (CVE-2022-3626)

  - LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from     extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
    (CVE-2022-3627)

  - A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function     TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is     possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
    The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to     fix this issue. The identifier VDB-213549 was assigned to this vulnerability. (CVE-2022-3970)

  - processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g.,     'WRITE of size 307203') via a crafted TIFF image. (CVE-2022-48281)

  - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e. (CVE-2023-0795)

  - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e. (CVE-2023-0796)

  - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by     tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
    (CVE-2023-0797)

  - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e. (CVE-2023-0798)

  - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit afaabc3e. (CVE-2023-0799)

  - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127. (CVE-2023-0800)

  - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by     tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
    (CVE-2023-0801)

  - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127. (CVE-2023-0802)

  - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127. (CVE-2023-0803)

  - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit 33aee127. (CVE-2023-0804)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5604-1 advisory.

    It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly use this     issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-2867, CVE-2022-2869)

    It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly use this     issue to cause a denial of service. (CVE-2022-2868)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

  - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to     trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into     application crash, potential information disclosure or any other context-dependent impact (CVE-2022-3570)

  - LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from     extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
    (CVE-2022-3597)

  - LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604,     allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff     from sources, the fix is available with commit cfbb883b. (CVE-2022-3598)

  - LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers     to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix     is available with commit e8131125. (CVE-2022-3599)

  - LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from     processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
    (CVE-2022-3626)

  - LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from     extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
    (CVE-2022-3627)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0095 advisory.

  - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
    (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

  - There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1     (CVE-2022-2519)

  - A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input. (CVE-2022-2520)

  - It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input. (CVE-2022-2521)

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
184559	Rocky Linux 8libtiff (RLSA-2023:0095)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium
170770	Debian DSA-5333-1 : tiff - security update	Nessus	Debian Local Security Checks	2023/1/29	2025/1/24	high
167166	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : LibTIFF vulnerabilities (USN-5714-1)	Nessus	Ubuntu Local Security Checks	2022/11/9	2024/8/29	medium
167414	EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-2735)	Nessus	Huawei Local Security Checks	2022/11/14	2023/10/4	medium
166865	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2657)	Nessus	Huawei Local Security Checks	2022/11/2	2022/11/30	medium
166867	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2689)	Nessus	Huawei Local Security Checks	2022/11/2	2022/11/30	medium
170032	AlmaLinux 8 : libtiff (ALSA-2023:0095)	Nessus	Alma Linux Local Security Checks	2023/1/13	2023/9/7	medium
177169	EulerOS Virtualization 3.0.6.0 : libtiff (EulerOS-SA-2023-2241)	Nessus	Huawei Local Security Checks	2023/6/13	2023/6/13	high
168525	EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2022-2799)	Nessus	Huawei Local Security Checks	2022/12/8	2023/9/20	medium
169385	EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2935)	Nessus	Huawei Local Security Checks	2022/12/28	2022/12/28	medium
169396	EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2909)	Nessus	Huawei Local Security Checks	2022/12/28	2022/12/28	medium
164890	Ubuntu 16.04 ESM : LibTIFF vulnerabilities (USN-5604-1)	Nessus	Ubuntu Local Security Checks	2022/9/8	2024/8/28	medium
169731	EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-1226)	Nessus	Huawei Local Security Checks	2023/1/10	2023/9/11	medium
172268	EulerOS 2.0 SP5 : compat-libtiff3 (EulerOS-SA-2023-1494)	Nessus	Huawei Local Security Checks	2023/3/8	2023/8/31	medium
172301	EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2023-1509)	Nessus	Huawei Local Security Checks	2023/3/8	2023/8/31	medium
224646	Linux Distros Unpatched Vulnerability : CVE-2022-2867	Nessus	Misc.	2025/3/5	2025/3/5	medium
184559	Rocky Linux 8 : libtiff (RLSA-2023:0095)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium

偵測

搜尋 Plugin

medium

high

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium