6.5
CVSSv3

CVE-2022-34526

Published: 29/07/2022 Updated: 07/11/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A stack overflow exists in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows malicious users to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff 4.4.0

fedoraproject fedora 36

netapp ontap select deploy administration utility -

netapp active iq unified manager -

debian debian linux 10.0

debian debian linux 11.0

Vendor Advisories

Several security issues were fixed in LibTIFF ...
Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image For the stable distribution (bullseye), these problems have been fixed in version 420-1+deb11u3 We recommend that ...
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v440 This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file ...
Severity Unknown Remote Unknown Type Unknown Description AVG-2842 libtiff 440-1 Unknown Unknown ...
A divide-by-zero vulnerability was found in libtiff This flaw allows an attacker to cause a denial of service via a crafted tiff file (CVE-2022-2056) A divide-by-zero vulnerability was found in libtiff This flaw allows an attacker to cause a denial of service via a crafted tiff file (CVE-2022-2057) A divide-by-zero vulnerability was found in li ...