Lucene search

DebianDEBIAN:DSA-5567-1:73E9C

HistoryNov 27, 2023 - 5:04 a.m.

[SECURITY] [DSA 5567-1] tiff security update

2023-11-2705:04:24

lists.debian.org

memory leaks

debian

cve-2023-3576

cve-2023-40745

denial of service

upgrade

cve-2023-41175

tiff

stable distribution

buffer overflows

oldstable distribution

security update

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

41.2%

JSON

Debian Security Advisory DSA-5567-1 [email protected]
https://www.debian.org/security/ Aron Xu
November 27, 2023 https://www.debian.org/security/faq

Package : tiff
CVE ID : CVE-2023-3576 CVE-2023-40745 CVE-2023-41175
Debian Bug :

Brief introduction

Multiple buffer overflows and memory leak issues have been found in tiff,
the Tag Image File Format (TIFF) library and tools, which may cause denial
of service when processing a crafted TIFF image.

For the oldstable distribution (bullseye), these problems have been fixed
in version 4.2.0-1+deb11u5.

For the stable distribution (bookworm), these problems have been fixed in
version 4.5.0-6+deb12u1.

We recommend that you upgrade your tiff packages.

For the detailed security status of tiff please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tiff

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian12armhflibtiff-tools-dbgsym< 4.5.0-6+deb12u1libtiff-tools-dbgsym_4.5.0-6+deb12u1_armhf.deb
Debian12armhflibtiff6-dbgsym< 4.5.0-6+deb12u1libtiff6-dbgsym_4.5.0-6+deb12u1_armhf.deb
Debian11s390xlibtiff-tools-dbgsym< 4.2.0-1+deb11u5libtiff-tools-dbgsym_4.2.0-1+deb11u5_s390x.deb
Debian11armhflibtiff-dev< 4.2.0-1+deb11u5libtiff-dev_4.2.0-1+deb11u5_armhf.deb
Debian12alltiff< 4.5.0-6+deb12u1tiff_4.5.0-6+deb12u1_all.deb
Debian10i386libtiff-dev< 4.1.0+git191117-2~deb10u9libtiff-dev_4.1.0+git191117-2~deb10u9_i386.deb
Debian11arm64libtiffxx5< 4.2.0-1+deb11u5libtiffxx5_4.2.0-1+deb11u5_arm64.deb
Debian12mips64ellibtiffxx6< 4.5.0-6+deb12u1libtiffxx6_4.5.0-6+deb12u1_mips64el.deb
Debian10arm64libtiff-opengl-dbgsym< 4.1.0+git191117-2~deb10u9libtiff-opengl-dbgsym_4.1.0+git191117-2~deb10u9_arm64.deb
Debian10arm64libtiff-dev< 4.1.0+git191117-2~deb10u8libtiff-dev_4.1.0+git191117-2~deb10u8_arm64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	armhf	libtiff-tools-dbgsym	< 4.5.0-6+deb12u1	libtiff-tools-dbgsym_4.5.0-6+deb12u1_armhf.deb
Debian	12	armhf	libtiff6-dbgsym	< 4.5.0-6+deb12u1	libtiff6-dbgsym_4.5.0-6+deb12u1_armhf.deb
Debian	11	s390x	libtiff-tools-dbgsym	< 4.2.0-1+deb11u5	libtiff-tools-dbgsym_4.2.0-1+deb11u5_s390x.deb
Debian	11	armhf	libtiff-dev	< 4.2.0-1+deb11u5	libtiff-dev_4.2.0-1+deb11u5_armhf.deb
Debian	12	all	tiff	< 4.5.0-6+deb12u1	tiff_4.5.0-6+deb12u1_all.deb
Debian	10	i386	libtiff-dev	< 4.1.0+git191117-2~deb10u9	libtiff-dev_4.1.0+git191117-2~deb10u9_i386.deb
Debian	11	arm64	libtiffxx5	< 4.2.0-1+deb11u5	libtiffxx5_4.2.0-1+deb11u5_arm64.deb
Debian	12	mips64el	libtiffxx6	< 4.5.0-6+deb12u1	libtiffxx6_4.5.0-6+deb12u1_mips64el.deb
Debian	10	arm64	libtiff-opengl-dbgsym	< 4.1.0+git191117-2~deb10u9	libtiff-opengl-dbgsym_4.1.0+git191117-2~deb10u9_arm64.deb
Debian	10	arm64	libtiff-dev	< 4.1.0+git191117-2~deb10u8	libtiff-dev_4.1.0+git191117-2~deb10u8_arm64.deb