LibTIFF 'tools/bmp2tiff.c' Out of Bounds Read Integer Overflow Vulnerability

Bugtraq ID:	71789
Class:	Boundary Condition Error
CVE:	CVE-2014-9330
Remote:	Yes
Local:	No
Published:	Dec 22 2014 12:00AM
Updated:	Sep 28 2016 03:01AM
Credit:	Paris Zoumpouloglou
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle Linux 7.0 Oracle Linux 6.0 LibTIFF LibTIFF 4.0.3 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.1 IBM SmartCloud Entry 2.3 Fix Pack 1 IBM SmartCloud Entry 2.3 Appliance fix pack 6 IBM SmartCloud Entry 2.3 Appliance fix pack 4 IBM SmartCloud Entry 2.2 Fix Pack 2 IBM SmartCloud Entry 2.2 Fix Pack 1 IBM SmartCloud Entry 2.2 Appliance fix pack 6 IBM SmartCloud Entry 2.2 Appliance fix pack 4 IBM SmartCloud Entry 2.2 IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 2.4.0.4 Appliance Fi IBM SmartCloud Entry 2.4.0 IBM SmartCloud Entry 2.3.0.4 Appliance Fi IBM SmartCloud Entry 2.3.0 IBM SmartCloud Entry 2.2.0.4 Appliance Fi IBM SmartCloud Entry 2.2.0.3 Appliance FP IBM SmartCloud Entry 2.2.0.3 Appliance FP IBM PowerKVM 3.1 IBM PowerKVM 2.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

LibTIFF 'tools/bmp2tiff.c' Out of Bounds Read Integer Overflow Vulnerability

LibTIFF is prone to an integer-overflow vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

LibTIFF 4.0.3 is vulnerable; other versions may also be affected.

LibTIFF 'tools/bmp2tiff.c' Out of Bounds Read Integer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

LibTIFF 'tools/bmp2tiff.c' Out of Bounds Read Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

LibTIFF 'tools/bmp2tiff.c' Out of Bounds Read Integer Overflow Vulnerability

References:

• Bug 2494 - Out-of-bounds memory read in bmp2tiff (Paris Zoumpouloglou)
  
• CVE-2014-9330 �?? Libtiff integer overflow in bmp2tiff (Paris Zoumpouloglou)
  
• LibTIFF Homepage (LibTIFF)
  
• Oracle Linux Bulletin - July 2016 (Oracle)
  
• isg3T1024132:Multiple vulnerabilities in libtiff affect PowerKVM (IBM)
  
• isg3T1024193: Libtiff vulnerabilities affect IBM SmartClound Entry (IBM)
  
• Oracle VM Server for x86 Bulletin - July 2016 (Oracle)