652 matches found
CVE-2022-2056
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
CVE-2022-2056
CVE-2022-2056 is a Divide By Zero vulnerability in tiffcrop of libtiff 4.4.0 that allows DoS via a crafted TIFF file. A fix is available (commit f3a5e010). Connected advisories cite libtiff DoS mitigations across multiple distros (ALAS2-2023-2263/ALSA-2023:0302/ALSM:0095, Debian DSA-5333-1, DLA-3...
CVE-2022-2057
CVE-2022-2057 is a Divide By Zero flaw in libtiff's tiffcrop affecting libtiff 4.4.0. Connected advisories confirm the issue and list the fix patch (commit f3a5e010) and ongoing updates across distributions (Debian, AlmaLinux, Alt Linux, cloud/packs). Affected component: tiffcrop within libtiff; ...
CVE-2022-2057
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
LibTIFF 数字错误漏洞
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.4.0. An attacker has exploited the...
CVE-2022-2058
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
CVE-2022-2057
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
CVE-2022-2057
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
CVE-2022-2056
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
CVE-2022-1210 affecting package libtiff for versions less than 4.4.0-1
CVE-2022-1210 affecting package libtiff for versions less than 4.4.0-1. An upgraded version of the package is available that resolves this issue...
[SECURITY] Fedora 36 Update: libtiff-4.4.0-1.fc36
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
Typo3 API XSS Vulnerabilities
The t3libdiv::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting XSS protection mechanism and inject arbitrary web script or HTML via non printable characters...
CVE-2022-28890
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities...
DEBIAN-CVE-2022-28890
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities...
CVE-2022-28890
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities...
PT-2022-19295 · Apache · Apache Jena
Name of the Vulnerable Software and Affected Versions: Apache Jena versions prior to 4.4.0 Description: A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects versions prior to 4.4.0, excluding Apache Jena 4.2.x and...
CVE-2022-24426
Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...
PT-2022-6890 · Libtiff +8 · Libtiff +8
Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds write in the TIFFmemcpy function, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be triggered when TIFFmemcpy is called from...
EulerOS Virtualization 3.0.6.6 : dhcp (EulerOS-SA-2022-1117)
According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower...