Arch Linux Security Advisory ASA-201911-13
=========================================
Severity: Medium
Date    : 2019-11-13
CVE-ID  : CVE-2019-6128 CVE-2019-7663
Package : libtiff
Type    : denial of service
Remote  : Yes
Link    : https://security.archlinux.org/AVG-886

Summary
======
The package libtiff before version 4.1.0-1 is vulnerable to denial of
service.

Resolution
=========
Upgrade to 4.1.0-1.

# pacman -Syu "libtiff>=4.1.0-1"

The problems have been fixed upstream in version 4.1.0.

Workaround
=========
None.

Description
==========
- CVE-2019-6128 (denial of service)

The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory
leak, as demonstrated by pal2rgb.

- CVE-2019-7663 (denial of service)

An Invalid Address dereference was discovered in
TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in
LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in
tiffcp.c. Remote attackers could leverage this vulnerability to cause a
denial-of-service via a crafted tiff file.

Impact
=====
A remote attacker is able to cause a denial of service.

References
=========
https://gitlab.com/libtiff/libtiff/-/commit/ae0bed1fe530a82faf2e9ea1775109dbf301a971
https://gitlab.com/libtiff/libtiff/-/commit/802d3cbf3043be5dce5317e140ccb1c17a6a2d39
https://gitlab.com/libtiff/libtiff/-/merge_requests/60
https://security.archlinux.org/CVE-2019-6128
https://security.archlinux.org/CVE-2019-7663