Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5619-1 advisory.

    It was discovered that LibTIFF was not properly performing the calculation of data that would eventually     be used as a reference for bound-checking operations. An attacker could possibly use this issue to cause a     denial of service or to expose sensitive information. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2020-19131)

    It was discovered that LibTIFF was not properly terminating a function execution when processing incorrect     data. An attacker could possibly use this issue to cause a denial of service or to expose sensitive     information. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-19144)

    It was discovered that LibTIFF did not properly manage memory under certain circumstances. If a user were     tricked into opening a specially crafted TIFF file using tiffinfo tool, an attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
    (CVE-2022-1354)

    It was discovered that LibTIFF did not properly manage memory under certain circumstances. If a user were     tricked into opening a specially crafted TIFF file using tiffcp tool, an attacker could possibly use this     issue to

    cause a denial of service. (CVE-2022-1355)

    It was discovered that LibTIFF was not properly performing checks to avoid division calculations where the     denominator value was zero, which could lead to an undefined behaviour situation via a specially crafted     file. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-2056,     CVE-2022-2057, CVE-2022-2058)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5523-1 advisory.

    It was discovered that LibTIFF was not properly performing checks to guarantee that allocated memory space     existed, which could lead to a NULL pointer dereference via a specially crafted file. An attacker could     possibly use this issue to cause a denial of service. (CVE-2022-0907, CVE-2022-0908)

    It was discovered that LibTIFF was not properly performing checks to avoid division calculations where the     denominator value was zero, which could lead to an undefined behavior situation via a specially crafted     file. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0909)

    It was discovered that LibTIFF was not properly performing bounds checks, which could lead to an out-of-     bounds read via a specially crafted file. An attacker could possibly use this issue to cause a denial of     service or to expose sensitive information. (CVE-2022-0924)

    It was discovered that LibTIFF was not properly performing the calculation of data that would eventually     be used as a reference for bounds checking operations, which could lead to an out-of-bounds read via a     specially crafted file. An attacker could possibly use this issue to cause a denial of service or to     expose sensitive information. (CVE-2020-19131)

    It was discovered that LibTIFF was not properly terminating a function execution when processing incorrect     data, which could lead to an out-of-bounds read via a specially crafted file. An attacker could possibly     use this issue to cause a denial of service or to expose sensitive information. (CVE-2020-19144)

    It was discovered that LibTIFF was not properly performing checks when setting the value for data later     used as reference during memory access, which could lead to an out-of-bounds read via a specially crafted     file. An attacker could possibly use this issue to cause a denial of service or to expose sensitive     information. (CVE-2022-22844)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2777 advisory.

  - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the invertImage()     function in the component tiffcrop. (CVE-2020-19131)

  - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy'     funtion in the component 'tif_unix.c'. (CVE-2020-19144)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
165277	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : LibTIFF vulnerabilities (USN-5619-1)	Nessus	Ubuntu Local Security Checks	medium
163272	Ubuntu 16.04 ESM : LibTIFF vulnerabilities (USN-5523-1)	Nessus	Ubuntu Local Security Checks	high
153844	Debian DLA-2777-1 : tiff - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-19144

medium

Tenable Plugins

medium

high

high