NA

CVE-2022-1354

Published: 31/08/2022 Updated: 23/02/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an malicious user to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff

fedoraproject fedora 34

fedoraproject fedora 35

fedoraproject fedora 36

redhat enterprise linux 9.0

netapp ontap select deploy administration utility -

debian debian linux 10.0

debian debian linux 11.0

Vendor Advisories

Synopsis Moderate: libtiff security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libtiff is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a se ...
Several security issues were fixed in LibTIFF ...
Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image For the stable distribution (bullseye), these problems have been fixed in version 420-1+deb11u3 We recommend that ...
A heap buffer overflow flaw was found in Libtiffs' tiffinfoc in TIFFReadRawDataStriped() function This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service ...
A heap buffer overflow flaw was found in Libtiffs' tiffinfoc in TIFFReadRawDataStriped() function This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service (CVE-2022-1354) A stack buffer overflow flaw was found in Libtiffs' tiffcpc ...
Out-of-bounds Read error in tiffcrop in libtiff 430 allows attackers to cause a denial-of-service via a crafted tiff file For users that compile libtiff from sources, the fix is available with commit 46dc8fcd (CVE-2022-1056) A heap buffer overflow flaw was found in Libtiffs' tiffinfoc in TIFFReadRawDataStriped() function This flaw allows an a ...