CVE-2023-0798: 
NixOS vulnerability analysis and mitigation

CVE-2023-0798 affects LibTIFF version 4.4.0, specifically the tiffcrop tool. The vulnerability was discovered in the extractContigSamplesShifted8bits function in tools/tiffcrop.c at line 3400, where an out-of-bounds read vulnerability exists. This security flaw allows attackers to cause a denial-of-service condition via a crafted TIFF file (GitLab Issue, NVD).

The vulnerability is an out-of-bounds read issue in the extractContigSamplesShifted8bits function located in tools/tiffcrop.c at line 3400. The CVSS v3.1 base score is 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, indicating local access is required and user interaction is needed (NetApp Advisory).

When successfully exploited, this vulnerability can lead to a denial-of-service condition through a segmentation fault when processing specially crafted TIFF files. The impact is primarily on the availability of the system running the tiffcrop tool (Red Hat Advisory).

For users that compile libtiff from sources, the fix is available with commit afaabc3e. Various distributions have released patched versions: Debian has fixed this in version 4.1.0+git191117-2~deb10u7 for Debian 10, Red Hat has addressed it in version 4.4.0-8.el9_2, and Gentoo has patched versions >= 4.5.0-r2 (Gentoo Advisory, Debian Advisory).