JFrog Security Research
< Back

XRAY-522144 - libtiff NULL dereference DoS

CVE-2023-3316 | CVSS 5.9

JFrog Severity:medium

Discovered ByYair Mizrahiof the JFrog Security Research Team

Published 19 Jun, 2023 | Last updated 19 Jun, 2023

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

libtiff:libtiff

[3.9.0,4.5.1), Fixed in 4.5.1

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

$ git clone https://gitlab.com/libtiff/libtiff.git
$ cd libtiff/
$ ./autogen.sh
$ ./configure && make
$ tools/tiffcrop -Z 1:1 empty.tif /non-existent-path

No mitigations are supplied for this issue

Advisory

Original issue

Fix MR

< Back