Published: 21/10/2022 Updated: 31/03/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing malicious users to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff
netapp active iq unified manager -
debian debian linux 10.0

Synopsis Moderate: libtiff security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libtiff is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a se ...

Debian Bug report logs - #1022555 tiff: CVE-2022-3627 CVE-2022-3626 CVE-2022-3599 CVE-2022-3598 CVE-2022-3597 CVE-2022-3570 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Sun, 23 Oct 2022 19:54:02 UTC Severity: grave Tags ...

Several security issues were fixed in LibTIFF ...

CWE-787 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3626.json https://gitlab.com/libtiff/libtiff/-/issues/426 https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047 https://security.netapp.com/advisory/ntap-20230110-0001/https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html https://access.redhat.com/errata/RHSA-2023:2340 https://ubuntu.com/security/notices/USN-5714-1 https://nvd.nist.gov

CVE-2022-3626

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect