Bug 629274 (CVE-2017-13726, CVE-2017-13727)

Summary:	<media-libs/tiff-4.0.9: crafted input creates denial of service (CVE-2017-{13726,13727})
Product:	Gentoo Security	Reporter:	Aleksandr Wagner (Kivak) <alwag>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	graphics+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	http://bugzilla.maptools.org/show_bug.cgi?id=2727 http://bugzilla.maptools.org/show_bug.cgi?id=2728
Whiteboard:	A4 [noglsa cve]
Package list:		Runtime testing required:	---

Description Aleksandr Wagner (Kivak) 2017-08-29 12:12:35 UTC

CVE-2017-13726 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13726):

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. 

References:

http://bugzilla.maptools.org/show_bug.cgi?id=2727

Patch:

https://github.com/vadz/libtiff/commit/f91ca83a21a6a583050e5a5755ce1441b2bf1d7e

CVE-2017-13727 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13727):

There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. 

References:

http://bugzilla.maptools.org/show_bug.cgi?id=2728

Patch:

https://github.com/vadz/libtiff/commit/b6af137bf9ef852f1a48a50a5afb88f9e9da01cc

Comment 1 SpanKY gentoo-dev

2018-01-26 03:29:25 UTC

tiff-4.0.9 is in the tree

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1d2499873abf8a233ea9517dc9eade5c6102da32

Comment 2 Aaron Bauman (RETIRED) gentoo-dev

2018-06-11 15:17:39 UTC

GLSA Vote: No

tree is clean