The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2340 advisory.

  - libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570)

  - libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597)

  - libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598)

  - libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599)

  - libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626)

  - libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)

  - libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)

  - libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)

  - libtiff: Heap buffer overflow in tiffcp() at tiffcp.c (CVE-2023-30086)

  - libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value     (CVE-2023-30774)

  - libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : libtiff (RHSA-2023:2340)

high Nessus Plugin ID 175464

Version 1.2