LibTIFF 'libtiff/tif_next.c' Memory Corruption Vulnerability
BID:73438
Info
LibTIFF 'libtiff/tif_next.c' Memory Corruption Vulnerability
| Bugtraq ID: | 73438 |
| Class: | Unknown |
| CVE: |
CVE-2015-1547 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 29 2014 12:00AM |
| Updated: | Sep 28 2016 12:02AM |
| Credit: | Salvatore Bonaccorso |
| Vulnerable: |
Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle Solaris 11.3 Oracle Solaris 10 Oracle Linux 7.0 Oracle Linux 6.0 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 LibTIFF LibTIFF 4.0.3 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.1 IBM SmartCloud Entry 2.3 Fix Pack 1 IBM SmartCloud Entry 2.3 Appliance fix pack 6 IBM SmartCloud Entry 2.3 Appliance fix pack 4 IBM SmartCloud Entry 2.2 Fix Pack 2 IBM SmartCloud Entry 2.2 Fix Pack 1 IBM SmartCloud Entry 2.2 Appliance fix pack 6 IBM SmartCloud Entry 2.2 Appliance fix pack 4 IBM SmartCloud Entry 2.2 IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 2.4.0.4 Appliance Fi IBM SmartCloud Entry 2.4.0 IBM SmartCloud Entry 2.3.0.4 Appliance Fi IBM SmartCloud Entry 2.3.0 IBM SmartCloud Entry 2.2.0.4 Appliance Fi IBM SmartCloud Entry 2.2.0.3 Appliance FP IBM SmartCloud Entry 2.2.0.3 Appliance FP IBM PowerKVM 3.1 IBM PowerKVM 2.1 |
| Not Vulnerable: |
Oracle Solaris 11.3 SRU9.4 |
Discussion
LibTIFF 'libtiff/tif_next.c' Memory Corruption Vulnerability
LibTIFF is prone to a remote memory-corruption vulnerability.
Attackers can exploit this issue to obtain sensitive information or crash the application resulting in a denial-of-service condition.
LibTIFF 4.0.3 is vulnerable; other versions may also be affected.
LibTIFF is prone to a remote memory-corruption vulnerability.
Attackers can exploit this issue to obtain sensitive information or crash the application resulting in a denial-of-service condition.
LibTIFF 4.0.3 is vulnerable; other versions may also be affected.
Exploit / POC
LibTIFF 'libtiff/tif_next.c' Memory Corruption Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
LibTIFF 'libtiff/tif_next.c' Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva lib64tiff-devel-4.0.4-0.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64tiff-static-devel-4.0.4-0.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64tiff5-4.0.4-0.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libtiff-progs-4.0.4-0.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
LibTIFF 'libtiff/tif_next.c' Memory Corruption Vulnerability
References:
References:
- LibTIFF Homepage (LibTIFF)
- libtiff: use of uninitialized memory in NeXTDecode (LibTIFF)
- Oracle Linux Bulletin - July 2016 (Oracle)
- isg3T1024132:Multiple vulnerabilities in libtiff affect PowerKVM (IBM)
- isg3T1024193: Libtiff vulnerabilities affect IBM SmartClound Entry (IBM)
- Oracle Solaris Third Party Bulletin - April 2016 (Oracle)
- Oracle VM Server for x86 Bulletin - July 2016 (Oracle)