Bug 629274 – <media-libs/tiff-4.0.9: crafted input creates denial of service (CVE-2017-{13726,13727})

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Aleksandr Wagner (Kivak) 2017-08-29 12:12:35 UTC]

CVE-2017-13726 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13726):

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. 

References:

http://bugzilla.maptools.org/show_bug.cgi?id=2727

Patch:

https://github.com/vadz/libtiff/commit/f91ca83a21a6a583050e5a5755ce1441b2bf1d7e

CVE-2017-13727 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13727):

There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. 

References:

http://bugzilla.maptools.org/show_bug.cgi?id=2728

Patch:

https://github.com/vadz/libtiff/commit/b6af137bf9ef852f1a48a50a5afb88f9e9da01cc

[Comment 1 SpanKY 2018-01-26 03:29:25 UTC]

tiff-4.0.9 is in the tree

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1d2499873abf8a233ea9517dc9eade5c6102da32

[Comment 2 Aaron Bauman (RETIRED) 2018-06-11 15:17:39 UTC]

GLSA Vote: No

tree is clean