CVE-2015-8665

What it actually does

Out-of-bounds read in LibTIFF tif_getimage.c triggered by a malformed SamplesPerPixel tag in a TIFF image, resulting in denial of service via application crash.

Why it matters to the business

Applications built with the listed Ruby packages on Ubuntu may experience unexpected crashes when handling untrusted TIFF images, causing operational disruption in image-processing workflows; the issue has remained low-risk with stable low exploit probability over a decade.

How an attack unfolds

An attacker crafts a TIFF image containing an invalid SamplesPerPixel tag value and delivers it to a victim who opens the file using an application linked to the vulnerable LibTIFF library present in the affected Ruby packages.

How to fix it

Upgrade ruby1.9.1 on Ubuntu 14.04 to 1.9.3.484-2ubuntu1.3, ruby2.0 on Ubuntu 14.04 to 2.0.0.484-1ubuntu2.4, and ruby2.3 on Ubuntu 16.04 to 2.3.1-2~16.04.2; rebuild or restart dependent applications after the update.

How to confirm the fix worked

Confirm installed package versions match the listed fixed releases using dpkg or apt; test image-processing functionality with both benign and boundary-case TIFF files to ensure no crash occurs.

Typical attack path

1. Craft malicious TIFF image with crafted SamplesPerPixel tag
2. Deliver the image to the target via email, download, or web page
3. Victim opens the image in an affected Ruby-linked application
4. LibTIFF performs out-of-bounds read leading to crash

How to detect it

Review application and system logs for unexpected crashes during TIFF image processing; because the vulnerability has not been observed in active campaigns, focus on availability monitoring rather than attacker artifacts.

What your security team should do

• Apply the listed package updates on all Ubuntu systems running the affected Ruby versions
• Inventory applications that depend on Ruby TIFF handling and prioritize patching
• Disable TIFF processing in unneeded components until patches are deployed