Bugzilla – Bug 1033118
VUL-0: CVE-2017-7598: tiff: tif_dirread.c might allow remote attackers to cause a denial of service
Last modified: 2018-05-16 12:04:24 UTC
CVE-2017-7598 tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7598 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7598
SUSE-SU-2017:2569-1: An update that fixes 14 vulnerabilities is now available. Category: security (moderate) Bug References: 1033109,1033111,1033112,1033113,1033118,1033120,1033126,1033127,1033128,1033129,1033131,1038438,1042804,1042805 CVE References: CVE-2016-10371,CVE-2017-7592,CVE-2017-7593,CVE-2017-7594,CVE-2017-7595,CVE-2017-7596,CVE-2017-7597,CVE-2017-7598,CVE-2017-7599,CVE-2017-7600,CVE-2017-7601,CVE-2017-7602,CVE-2017-9403,CVE-2017-9404 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): tiff-4.0.8-44.3.1 SUSE Linux Enterprise Software Development Kit 12-SP2 (src): tiff-4.0.8-44.3.1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): tiff-4.0.8-44.3.1 SUSE Linux Enterprise Server 12-SP3 (src): tiff-4.0.8-44.3.1 SUSE Linux Enterprise Server 12-SP2 (src): tiff-4.0.8-44.3.1 SUSE Linux Enterprise Desktop 12-SP3 (src): tiff-4.0.8-44.3.1 SUSE Linux Enterprise Desktop 12-SP2 (src): tiff-4.0.8-44.3.1
openSUSE-SU-2017:2635-1: An update that fixes 14 vulnerabilities is now available. Category: security (moderate) Bug References: 1033109,1033111,1033112,1033113,1033118,1033120,1033126,1033127,1033128,1033129,1033131,1038438,1042804,1042805 CVE References: CVE-2016-10371,CVE-2017-7592,CVE-2017-7593,CVE-2017-7594,CVE-2017-7595,CVE-2017-7596,CVE-2017-7597,CVE-2017-7598,CVE-2017-7599,CVE-2017-7600,CVE-2017-7601,CVE-2017-7602,CVE-2017-9403,CVE-2017-9404 Sources used: openSUSE Leap 42.3 (src): tiff-4.0.8-21.1 openSUSE Leap 42.2 (src): tiff-4.0.8-17.6.1
http://bugzilla.maptools.org/show_bug.cgi?id=2644 https://github.com/vadz/libtiff/commit/3cfd62d77c2a7e147a05bd678524c345fa9c2bb8
BEFORE 12/tiff $ tiffcp -i 00115-libtiff-fpe-tif_dirread /tmp/foo TIFFReadDirectoryCheckOrder: Warning, Invalid TIFF directory; tags are not sorted in ascending order. TIFFFetchNormalTag: Warning, Sanity check on size of "DocumentName" value failed; tag ignored. TIFFReadDirectory: Warning, BitsPerSample tag is missing, assuming 8 bits per sample. OJPEGSetupDecode: Warning, Depreciated and troublesome old-style JPEG compression mode, please convert to new-style JPEG compression and notify vendor of writing software. OJPEGSetupEncode: OJPEG encoding not supported; use new-style JPEG compression instead. /tmp/foo: Error, can't write scanline 0. TIFFWriteDirectoryTagCheckedRational: Not-a-number value is illegal. $ 11/tiff $ tiffcp -i 00115-libtiff-fpe-tif_dirread /tmp/foo 00115-libtiff-fpe-tif_dirread: This is a BigTIFF file. This format not supported by this version of libtiff.. $ [testcase cannot be used] PATCH comment 3 12/tiff: fix already in via version update 11,10sp3/tiff: no code found