384
VMScore

CVE-2022-0907

Published: 11/03/2022 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows malicious users to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff 4.3.0

debian debian linux 10.0

debian debian linux 11.0

fedoraproject fedora 35

fedoraproject fedora 36

netapp ontap select deploy administration utility -

Vendor Advisories

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service if malformed image files are processed For the oldstable distribution (buster), these problems have been fixed in version 410+git191117-2~deb10u4 For the stable distribution (bullseye), these problems have been fixe ...
Several security issues were fixed in LibTIFF ...
Several security issues were fixed in LibTIFF ...
Integer overflow in the writeBufferToSeparateStrips function in tiffcropc in LibTIFF before 407 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file (CVE-2016-9532) A flaw was found in libtiff Due to a memory allocation failure in tif_readc, a crafted TIFF file can lead to an abort, resulting in den ...
Integer overflow in the writeBufferToSeparateStrips function in tiffcropc in LibTIFF before 407 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file (CVE-2016-9532) A flaw was found in libtiff Due to a memory allocation failure in tif_readc, a crafted TIFF file can lead to an abort, resulting in den ...
Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 430 allows attackers to cause a denial-of-service via a crafted tiff file For users that compile libtiff from sources, the fix is available with commit f2b656e2 ...
Severity Unknown Remote Unknown Type Unknown Description AVG-2659 lib32-libtiff 430-1 430-2 Unknown Unknown AVG-2658 libtiff 430-1 430-2 Unknown Unknown ...
A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy() function within the TIFFFetchStripThing() in tif_dirreadc This flaw allows an attacker with a crafted TIFF file to exploit this flaw, causing a crash and leading to a denial of service (CVE-2022-0561) A flaw was found in libtiff where a NULL source poin ...