VMware Tanzu products update for LibTIFF
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2022-2867 CVE-2022-2868 CVE-2022-2869 |
| CWE-ID | CWE-191 CWE-125 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
VMware Tanzu Operations Manager Server applications / Virtualization software Tanzu Greenplum for Kubernetes Other software / Other software solutions |
| Vendor | VMware, Inc |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Integer underflow
EUVDB-ID: #VU67137
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-2867
CWE-ID:
CWE-191 - Integer underflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer underflow within the tiffcrop utility. A remote attacker can pass a specially crafted file to the affected application, trigger an integer underflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsVMware Tanzu Operations Manager: before 2.7.25, 2.8.16, 2.9.12, 2.10.39, 2.7.25, 2.7.25, 2.7.25
Tanzu Greenplum for Kubernetes: before 2.0.0
CPE2.3- cpe:2.3:a:vmware:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:tanzu_greenplum_for_kubernetes:*:*:*:*:*:*:*:*
https://tanzu.vmware.com/security/usn-5604-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Out-of-bounds read
EUVDB-ID: #VU67140
Risk: Low
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-2868
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the tiffcrop utility. A remote attacker can pass a specially crafted file to the application, trigger an out-of-bounds read error and perform a denial of service (DoS) attack.
Install updates from vendor's website.
Vulnerable software versionsVMware Tanzu Operations Manager: before 2.7.25, 2.8.16, 2.9.12, 2.10.39, 2.7.25, 2.7.25, 2.7.25
Tanzu Greenplum for Kubernetes: before 2.0.0
CPE2.3 External linkshttps://tanzu.vmware.com/security/usn-5604-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Integer underflow
EUVDB-ID: #VU67138
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-2869
CWE-ID:
CWE-191 - Integer underflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer underflow within the extractContigSamples8bits routine in the tiffcrop utility. A remote attacker can pass a specially crafted file to the affected application, trigger an integer underflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsVMware Tanzu Operations Manager: before 2.7.25, 2.8.16, 2.9.12, 2.10.39, 2.7.25, 2.7.25, 2.7.25
Tanzu Greenplum for Kubernetes: before 2.0.0
CPE2.3 External linkshttps://tanzu.vmware.com/security/usn-5604-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
