Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Ubuntu 16.04 ESM USN-5743-1 Moderate: LibTIFF Denial of Service

ubuntu
Calendar Grey November 24, 2022
Dist Ubuntu Esm H88
The LibTIFF library may permit remote code execution or lead to application instability through specifically designed image files when used on Ubuntu 16.04 ESM.
LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

LibTIFF could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- tiff: Tag Image File Format (TIFF) library

Details:

It was discovered that LibTIFF incorrectly handled certain malformed

images. If a user or automated system were tricked into opening a

specially crafted image, a remote attacker could crash the application,

leading to a denial of service, or possibly execute arbitrary code with

user privileges.

Topics%20covered

Topics Covered

security advisory denial of service ubuntu tiff library libtiff

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   libtiff-tools                   4.0.6-1ubuntu0.8+esm8
   libtiff5                         4.0.6-1ubuntu0.8+esm8

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5743-1

CVE-2022-3970

November 24, 2022

Topics%20covered

Topics Covered

security advisory denial of service ubuntu tiff library libtiff

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.