| Title | Tiff to PS conversion crashes due to incorrect memory size request in libtiff |
|---|
| Description | When converting A TIFF file to a PS file, a well-crafted TIFF can result in a mis-sized memory request. This can result in a local denial of service
OS：ubuntu 20.04
LIBTIFF, Version 4.3.0
Command: ./tiff2ps -2 -a Poc.tiff
POC Link : https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiff
ASAN Report:
==1860246==ERROR: AddressSanitizer: allocator is out of memory trying to allocate 0x2000000000 bytes
#0 0x499d1d in __interceptor_malloc (/home/user/libtiff/tools/.libs/tiff2ps+0x499d1d)
#1 0x7ffff7a46193 in _init (/lib/x86_64-linux-gnu/libjbig.so.0+0x1193)
#2 (closed) 0x7ffff7db3407 (/home/user/libtiff/libtiff/.libs/libtiff.so.5+0x3407)
==1860246==HINT: if you don't care about these errors you may set allocator_may_return_null=1
SUMMARY: AddressSanitizer: out-of-memory (/home/user/libtiff/tools/.libs/tiff2ps+0x499d1d) in __interceptor_malloc
==1860246==ABORTING
See the link below for more information：
https://gitlab.com/libtiff/libtiff/-/issues/402
|
|---|
| Source | ⚠️ https://gitlab.com/libtiff/libtiff/-/issues/402 |
|---|
| User | patchkey (UID 25647) |
|---|
| Submission | 04/03/2022 08:48 (4 years ago) |
|---|
| Moderation | 04/03/2022 09:00 (12 minutes later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 196363 [LibTIFF 4.3.0 tiff2ps resource consumption] |
|---|
| Points | 20 |
|---|