Bugzilla – Bug 1205422
VUL-0: CVE-2022-3570: tiff: libtiff: heap buffer overflows in tiffcrop.c
Last modified: 2023-01-10 20:35:02 UTC
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact References: https://gitlab.com/libtiff/libtiff/-/issues/386 https://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094c https://gitlab.com/libtiff/libtiff/-/issues/381 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.json References: https://bugzilla.redhat.com/show_bug.cgi?id=2142734 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3570 https://www.cve.org/CVERecord?id=CVE-2022-3570 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.json https://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094c https://gitlab.com/libtiff/libtiff/-/issues/386 https://gitlab.com/libtiff/libtiff/-/issues/381
The fix for this seems to be exactly the same as for bsc#1204642 - (CVE-2022-3598). So https://build.opensuse.org/request/show/1035628 with the tiff-CVE-2022-3598.patch should fix this for Factory. For SLE12/15 the fix is not as easy since a lot of code changed. I will later write my ideas about that in bsc#1204642. Should the Factory patch be renamed to include both CVE names?
I have the fixes for CVE-2022-3597 [bsc#1204641] CVE-2022-3626 [bsc#1204644] CVE-2022-3627 [bsc#1204645] CVE-2022-3599 [bsc#1204643] and CVE-2022-3970 [bsc#1205392] in my for SLE12 and SLE15 at https://build.suse.de/project/show/home:mvetter:bv. All of them are already submitted to Factory. I am/was still working on CVE-2022-3598 [bsc#1204642] which is a little harder since a lot of code changes happened. I will comment on this bug with more details. Today I also received CVE-2022-3570 [bsc#1205422] which looks like the same as CVE-2022-3598. I will be on vacation and will try to find someone who can work on the last remaining CVE and then make a submission. In case any of the fixed bugs are urgent we could also do a submssion already from my home:mvetter:bv to SLE12/SLE15.
SUSE-SU-2022:4411-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1204642,1205422 CVE References: CVE-2022-3570,CVE-2022-3598 JIRA References: Sources used: openSUSE Leap Micro 5.3 (src): tiff-4.0.9-150000.45.22.1 openSUSE Leap Micro 5.2 (src): tiff-4.0.9-150000.45.22.1 openSUSE Leap 15.4 (src): tiff-4.0.9-150000.45.22.1 openSUSE Leap 15.3 (src): tiff-4.0.9-150000.45.22.1 SUSE Manager Server 4.1 (src): tiff-4.0.9-150000.45.22.1 SUSE Manager Retail Branch Server 4.1 (src): tiff-4.0.9-150000.45.22.1 SUSE Manager Proxy 4.1 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server for SAP 15 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Server 15-LTSS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Micro 5.3 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise Micro 5.2 (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): tiff-4.0.9-150000.45.22.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): tiff-4.0.9-150000.45.22.1 SUSE Enterprise Storage 7 (src): tiff-4.0.9-150000.45.22.1 SUSE Enterprise Storage 6 (src): tiff-4.0.9-150000.45.22.1 SUSE CaaS Platform 4.0 (src): tiff-4.0.9-150000.45.22.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:0060-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1204642,1205422 CVE References: CVE-2022-3570,CVE-2022-3598 JIRA References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP5 (src): tiff-4.0.9-44.62.1 SUSE Linux Enterprise Server 12-SP5 (src): tiff-4.0.9-44.62.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.