Bugzilla – Bug 916925
VUL-1: CVE-2015-1547: tiff: Use of uninitialized memory in NeXTDecode
Last modified: 2022-12-16 14:07:40 UTC
Created attachment 622439 [details] Reproducer CVE-2015-1547 Discovered by Michal Zalewski <lcamtuf@coredump.cx> Use of uninitialized memory in NeXTDecode after fixing the previous case.. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1547 http://seclists.org/oss-sec/2015/q1/454
bugbot adjusting priority
P4 for planned update.
In the contrast of CVE-2014-9655 (bug 916927), CVE-2014-8127, CVE-2014-8128, CVE-2014-8129 and CVE-2014-8130 (bug 914890) this one is not covered by upstream commit or by bug number at least. Michal said on oss-security that he 'reported to them', so there will be certainly bug number assigned to this issue.
(In reply to Petr Gajdos from comment #3) I can neither find a bug nor a matching commit. We will have to wait for a patch.
According to Michal, following entry fixes the issue: * libtiff/tif_next.c: add new tests to check that we don't read outside of the compressed input stream buffer.
Packages submitted.
openSUSE-SU-2015:0450-1: An update that fixes 6 vulnerabilities is now available. Category: security (moderate) Bug References: 914890,916925,916927 CVE References: CVE-2014-8127,CVE-2014-8128,CVE-2014-8129,CVE-2014-8130,CVE-2014-9655,CVE-2015-1547 Sources used: openSUSE 13.2 (src): tiff-4.0.3-10.4.1 openSUSE 13.1 (src): tiff-4.0.3-8.4.1
An update workflow for this issue was started. This issue was rated as moderate. Please submit fixed packages until 2015-07-15. When done, reassign the bug to security-team@suse.de. https://swamp.suse.de/webswamp/wf/62163
openSUSE-SU-2015:1213-1: An update that fixes 6 vulnerabilities is now available. Category: security (moderate) Bug References: 914890,916925,916927 CVE References: CVE-2014-8127,CVE-2014-8128,CVE-2014-8129,CVE-2014-8130,CVE-2014-9655,CVE-2015-1547 Sources used: openSUSE 13.2 (src): tiff-4.0.4-10.10.1 openSUSE 13.1 (src): tiff-4.0.4-8.10.1
The bug does not seem to be fixed. http://bugzilla.maptools.org/show_bug.cgi?id=2508 can you please check Petr?
Look at the date of comment 0 of this bug and date of the Description of bug 2508. And yes, we have 2508 tracked (in 914890 comment 45). IMHO dropping tiff tools would be the best thing if possible.
ok, thanks for the heads up. this bug stands so far unfixed.
An update workflow for this issue was started. This issue was rated as "low". Please submit fixed packages until "Jan. 6, 2016". When done, reassign the bug to "security-team@suse.de". /update/121220/.
An update workflow for this issue was started. This issue was rated as "low". Please submit fixed packages until "Jan. 11, 2016". When done, reassign the bug to "security-team@suse.de". /update/62403/.
An update workflow for this issue was started. This issue was rated as important. Please submit fixed packages until 2016-01-11. When done, reassign the bug to security-team@suse.de. https://swamp.suse.de/webswamp/wf/62403
all fixed and released.