CVE-2019-14973
published 2019-08-14CVE-2019-14973: _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is…
PriorityP428medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
4.20%
89.7th percentile
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | tiff | < tiff 4.0.10+git190814-1 (bookworm) | tiff 4.0.10+git190814-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| libtiff | libtiff | <= 4.0.10 | — |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5LOW
vendor_redhat6.5MEDIUM
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
LibTIFF vulnerabilities
vendor_ubuntu·2023-02-02·CVSS 6.5
CVE-2019-14973 [MEDIUM] LibTIFF vulnerabilities
Title: LibTIFF vulnerabilities
Summary: Several security issues were fixed in LibTIFF.
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a
specially crafted image, a remote attacker could crash the application,
leading to a denial of service, or possibly execute arbitrary code with
user privileges. This issue was only fixed in Ubuntu 14.04 ESM.
(CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,
CVE-2022-3970)
It was discovered that LibTIFF was incorrectly acessing a data structure
when processing data with the tiffcrop tool, which could lead to a heap
buffer overflow. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2022-48281)
Instructi
Ubuntu
LibTIFF vulnerabilities
vendor_ubuntu·2019-10-17
CVE-2019-14973 LibTIFF vulnerabilities
Title: LibTIFF vulnerabilities
Summary: Several security issues were fixed in LibTIFF.
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
vendor_redhat·2019-08-14·CVSS 6.5
CVE-2019-14973 [MEDIUM] CWE-190 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
Package: libtiff (Red Hat Enterprise Linux 5) - Out of support scope
Package: libtiff (Red Hat Enterprise Linux 6) - Will not fix
Debian
CVE-2019-14973: tiff - _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mi...
vendor_debian·2019·CVSS 6.5
CVE-2019-14973 [MEDIUM] CVE-2019-14973: tiff - _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mi...
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
Scope: local
bookworm: resolved (fixed in 4.0.10+git190814-1)
bullseye: resolved (fixed in 4.0.10+git190814-1)
forky: resolved (fixed in 4.0.10+git190814-1)
sid: resolved (fixed in 4.0.10+git190814-1)
trixie: resolved (fixed in 4.0.10+git190814-1)
OSV
tiff vulnerabilities
osv·2023-02-02·CVSS 6.5
CVE-2019-14973 [MEDIUM] tiff vulnerabilities
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a
specially crafted image, a remote attacker could crash the application,
leading to a denial of service, or possibly execute arbitrary code with
user privileges. This issue was only fixed in Ubuntu 14.04 ESM.
(CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,
CVE-2022-3970)
It was discovered that LibTIFF was incorrectly acessing a data structure
when processing data with the tiffcrop tool, which could lead to a heap
buffer overflow. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2022-48281)
GHSA
GHSA-2586-jx35-m7r7: _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux
ghsa_unreviewed·2022-05-24
CVE-2019-14973 [MEDIUM] CWE-190 GHSA-2586-jx35-m7r7: _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
OSV
CVE-2019-14973: _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux
osv·2019-08-14·CVSS 6.5
CVE-2019-14973 [MEDIUM] CVE-2019-14973: _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
bugzilla·2019-08-27·CVSS 6.5
CVE-2019-14973 [MEDIUM] CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
A vulnerability was found in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
Reference:
https://gitlab.com/libtiff/libtiff/merge_requests/90
Discussion:
Created libtiff tracking bugs for this issue:
Affects: fedora-all [bug 1745952]
---
Analysis:
This is more of a hardening then a flaw. libtiff used an unsafe way to detect overflow in multiplication of signed types, which was implementation dependent. The issue is fixed by adding proper integer overflow checks.
Commit: https://gitlab.co
Bugzilla
CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c [fedora-all]
bugzilla·2019-08-27·CVSS 6.5
CVE-2019-14973 [MEDIUM] CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c [fedora-all]
CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affe
Checkpoint
OptOut – Compiler Undefined Behavior Optimizations
blogs_checkpoint·2020-04-24
CVE-2019-14973 OptOut – Compiler Undefined Behavior Optimizations
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
AI Research 2
Android Malware 23
Artificial Intelligence 4
ChatGPT 3
Check Point Research Publications 455
Cloud Security 1
CPRadio 44
Crypto 2
Data & Threat Intelligence 2
Data Analysis 0
Demos 22
Global Cyber Attack Reports 408
How To Guides 13
Ransomware 5
Russo-Ukrainian War 1
Security Report 1
Threat and data analysis 0
Threat Research 174
Web 3.0 Security 11
Wipers 0
## OptOut – Compiler Undefined Behavior Optimizations
Research by: Eyal Itkin, Gili Yankovitch
## Introduction
memset()
Intrigued by this gap between the programmers’ expectations and th
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00102.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-11/msg00023.htmlhttp://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.htmlhttps://gitlab.com/libtiff/libtiff/merge_requests/90https://lists.debian.org/debian-lts-announce/2019/08/msg00031.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63BVT6N5KQPHWOWM4B3I7Z3ODBXUVNPS/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADNPG7JJTRRK22GUVTAFH3GJ6WGKUZJB/https://seclists.org/bugtraq/2019/Nov/5https://seclists.org/bugtraq/2020/Jan/32https://www.debian.org/security/2020/dsa-4608https://www.debian.org/security/2020/dsa-4670http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00102.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-11/msg00023.htmlhttp://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.htmlhttps://gitlab.com/libtiff/libtiff/merge_requests/90https://lists.debian.org/debian-lts-announce/2019/08/msg00031.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63BVT6N5KQPHWOWM4B3I7Z3ODBXUVNPS/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADNPG7JJTRRK22GUVTAFH3GJ6WGKUZJB/https://seclists.org/bugtraq/2019/Nov/5https://seclists.org/bugtraq/2020/Jan/32https://www.debian.org/security/2020/dsa-4608https://www.debian.org/security/2020/dsa-4670
2019-08-14
Published