Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv3

CVE-2022-3599

Published: 21/10/2022 Updated: 23/02/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Libtiff

Vulnerability Summary

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing malicious users to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff

netapp active iq unified manager -

debian debian linux 10.0

debian debian linux 11.0

Vendor Advisories

Red Hat: Moderate: libtiff security update
Synopsis Moderate: libtiff security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libtiff is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a se ...
Debian CVElist Bug Report Logs: tiff: CVE-2022-3627 CVE-2022-3626 CVE-2022-3599 CVE-2022-3598 CVE-2022-3597 CVE-2022-3570
Debian Bug report logs - #1022555 tiff: CVE-2022-3627 CVE-2022-3626 CVE-2022-3599 CVE-2022-3598 CVE-2022-3597 CVE-2022-3570 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Sun, 23 Oct 2022 19:54:02 UTC Severity: grave Tags ...
Ubuntu Security Notice: USN-5714-1: LibTIFF vulnerabilities
Several security issues were fixed in LibTIFF ...
Debian Security Advisories: DSA-5333-1 tiff -- security update
Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image For the stable distribution (bullseye), these problems have been fixed in version 420-1+deb11u3 We recommend that ...
Arch Linux Issues:
Severity Unknown Remote Unknown Type Unknown Description AVG-2842 libtiff 440-1 Unknown Unknown ...

References

CWE-125https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246https://gitlab.com/libtiff/libtiff/-/issues/398https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3599.jsonhttps://security.netapp.com/advisory/ntap-20230110-0001/https://lists.debian.org/debian-lts-announce/2023/01/msg00018.htmlhttps://www.debian.org/security/2023/dsa-5333https://access.redhat.com/errata/RHSA-2023:2340https://ubuntu.com/security/notices/USN-5714-1https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook