CVE-2017-5849 Memory corruption in n/a

Medium 5.5 Published 15 Mar 2017 Updated 5 Aug 2024

Remote attackers can cause denial of service via crafted TIFF images due to improper handling of image dimensions in Netpbm.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2017-5849?

CVE-2017-5849 is a medium-severity memory corruption vulnerability in Fedoraproject Fedora, published on 15 Mar 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.

Weakness: CWE-787, CWE-125

Which versions are affected by CVE-2017-5849?

It affects 2 products.

Linux distribution packages (7)

`netpbm` SUSE:Linux Enterprise Module for Basesystem 15 SP5	All versions	`10.80.1-150000.3.14.1`
`netpbm` SUSE:Linux Enterprise Module for Desktop Applications 15 SP5	All versions	`10.80.1-150000.3.14.1`
`netpbm` SUSE:Linux Enterprise Server 12 SP5	All versions	`10.66.3-8.10.1`
`netpbm` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	All versions	`10.66.3-8.10.1`
`netpbm` SUSE:Linux Enterprise Software Development Kit 12 SP5	All versions	`10.66.3-8.10.1`
`netpbm` openSUSE:Leap 15.5	All versions	`10.80.1-150000.3.14.1`
`netpbm` openSUSE:Tumbleweed	All versions	`11.5.2-2.1`

Products include Fedoraproject Fedora, Netpbm Project Netpbm.

How do I fix CVE-2017-5849?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2017-5849 being exploited?

There is no known exploitation of CVE-2017-5849 in the wild and no public exploit code.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as GHSA-7c32-9pjx-pj89, SUSE-SU-2024:0434-1, SUSE-SU-2024:0435-1, openSUSE-SU-2024:13655-1.