SUSE SLES11 Security Update : tiff (SUSE-SU-2022:14888-1)

high Nessus Plugin ID 158178

Language:

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14888-1 advisory.

- tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. (CVE-2015-8665)

- The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. (CVE-2015-8683)

- A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service. (CVE-2020-35521)

- In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack. (CVE-2020-35522)

- An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-35523)

- A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-35524)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected libtiff3, libtiff3-32bit and / or tiff packages.

See Also

https://bugzilla.suse.com/1156749

https://bugzilla.suse.com/1156754

https://bugzilla.suse.com/1182808

https://bugzilla.suse.com/1182809

https://bugzilla.suse.com/1182811

https://bugzilla.suse.com/1182812

http://www.nessus.org/u?8528f1f5

https://www.suse.com/security/cve/CVE-2015-8665

https://www.suse.com/security/cve/CVE-2015-8683

https://www.suse.com/security/cve/CVE-2020-35521

https://www.suse.com/security/cve/CVE-2020-35522

https://www.suse.com/security/cve/CVE-2020-35523

https://www.suse.com/security/cve/CVE-2020-35524

Plugin Details

Severity: High

ID: 158178

File Name: suse_SU-2022-14888-1.nasl

Version: 1.2

Type: local

Agent: unix

Published: 2/19/2022

Updated: 2/19/2022

Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: E:U/RL:OF/RC:C

CVSS Score Source: CVE-2020-35524

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:libtiff3, p-cpe:/a:novell:suse_linux:libtiff3-32bit, p-cpe:/a:novell:suse_linux:tiff, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 2/18/2022

Vulnerability Publication Date: 12/23/2015

Reference Information

CVE: CVE-2015-8665, CVE-2015-8683, CVE-2020-35521, CVE-2020-35522, CVE-2020-35523, CVE-2020-35524

SuSE: SUSE-SU-2022:14888-1