An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2289 advisory.

  - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash. (CVE-2023-6228)

  - LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of     service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers     a heap-based buffer overflow. (CVE-2023-40745)

  - A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw     allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted     tiff image, which triggers a heap-based buffer overflow. (CVE-2023-41175)

  - A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a     buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
    (CVE-2023-3618)

  - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a     denial of service via crafted TIFF file. (CVE-2022-40090)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2289 advisory.

  - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a     denial of service via crafted TIFF file. (CVE-2022-40090)

  - A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a     buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
    (CVE-2023-3618)

  - LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of     service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers     a heap-based buffer overflow. (CVE-2023-40745)

  - A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw     allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted     tiff image, which triggers a heap-based buffer overflow. (CVE-2023-41175)

  - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash. (CVE-2023-6228)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash. (CVE-2023-6228)

  - An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a     remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
    (CVE-2023-6277)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6644-2 advisory.

  - A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to     the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading     to a denial of service. (CVE-2023-52356)

  - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash. (CVE-2023-6228)

  - An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a     remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
    (CVE-2023-6277)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6644-1 advisory.

  - A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to     the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading     to a denial of service. (CVE-2023-52356)

  - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash. (CVE-2023-6228)

  - An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a     remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
    (CVE-2023-6277)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash. (CVE-2023-6228)

  - An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a     remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
    (CVE-2023-6277)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
196585	RHEL 6 : libtiff (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196532	RHEL 7 : libtiff (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
195071	Oracle Linux 9 : libtiff (ELSA-2024-2289)	Nessus	Oracle Linux Local Security Checks	medium
194805	RHEL 9 : libtiff (RHSA-2024:2289)	Nessus	Red Hat Local Security Checks	medium
192439	EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2024-1456)	Nessus	Huawei Local Security Checks	medium
192438	EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2024-1471)	Nessus	Huawei Local Security Checks	medium
192376	EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2024-1444)	Nessus	Huawei Local Security Checks	medium
192335	EulerOS Virtualization 2.11.1 : libtiff (EulerOS-SA-2024-1416)	Nessus	Huawei Local Security Checks	medium
192089	EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2024-1361)	Nessus	Huawei Local Security Checks	medium
192079	EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2024-1382)	Nessus	Huawei Local Security Checks	medium
191065	Ubuntu 22.04 LTS : LibTIFF vulnerabilities (USN-6644-2)	Nessus	Ubuntu Local Security Checks	high
190713	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 23.10 : LibTIFF vulnerabilities (USN-6644-1)	Nessus	Ubuntu Local Security Checks	high
190291	EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-1179)	Nessus	Huawei Local Security Checks	medium
190253	EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-1199)	Nessus	Huawei Local Security Checks	medium
189688	EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2024-1108)	Nessus	Huawei Local Security Checks	medium
189687	EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2024-1123)	Nessus	Huawei Local Security Checks	medium
188971	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-1088)	Nessus	Huawei Local Security Checks	medium
188777	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-1064)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2023-6228

medium

Tenable Plugins

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

high

high

medium

medium

medium

medium

medium

medium