Bug 2218830 (CVE-2023-2908)

Summary: CVE-2023-2908 libtiff: null pointer dereference in tif_dir.c
Product: [Other] Security Response Reporter: TEJ RATHI <trathi>
Component: vulnerabilityAssignee: Nobody <nobody>
Status: NEW --- QA Contact:
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: bdettelb, caswilli, fjansen, hkataria, jburrell, jkoehler, jsherril, kaycoth, kshier, micjohns, mmuzila, nforro, rh-spice-bugs, sthirugn
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Libtiff 4.5.1rc1 Doc Type: ---
Doc Text:
A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2218832, 2218834, 2218835, 2218833    
Bug Blocks: 2210179    

Description TEJ RATHI 2023-06-30 07:35:03 UTC 
An issue was found in libtiff caused by runtime error: applying zero offset to null pointer leading to undefined behavior or crash.

https://gitlab.com/libtiff/libtiff/-/merge_requests/479
https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f
Comment 1 TEJ RATHI 2023-06-30 07:52:06 UTC 
Created iv tracking bugs for this issue:

Affects: fedora-all [bug 2218833]


Created libtiff tracking bugs for this issue:

Affects: fedora-all [bug 2218832]


Created mingw-libtiff tracking bugs for this issue:

Affects: fedora-all [bug 2218834]


Created tkimg tracking bugs for this issue:

Affects: fedora-all [bug 2218835]