Lucene search
+L

7889 matches found

Positive Technologies
Positive Technologies
added 2022/08/17 12:00 a.m.10 views

PT-2022-6892 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff versions affected versions not specified Description: The issue is related to a uint32 t underflow in the tiffcrop tool of the libtiff library, leading to out of bounds read and write in the extractContigSamples8bits routine. An...

9.1CVSS7AI score0.10639EPSS
SaveExploits59References334
Positive Technologies
Positive Technologies
added 2022/08/17 12:00 a.m.12 views

PT-2022-6896 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff versions affected versions not specified Description: The issue is related to an improper input validation flaw in libtiff's tiffcrop utility. This flaw can lead to an out of bounds read, causing a crash if an attacker supplies a...

9.1CVSS7AI score0.10639EPSS
SaveExploits59References334
Debian CVE
Debian CVE
added 2022/08/17 12:00 a.m.123 views

CVE-2022-2867

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5.5CVSS7.2AI score0.00317EPSS
SaveExploits0
OSV
OSV
added 2022/08/17 12:00 a.m.30 views

CVE-2022-2867

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5AI score
SaveExploits0References5
CVE
CVE
added 2022/08/17 12:00 a.m.194 views

CVE-2022-2867

libtiff’s tiffcrop utility has a uint32 underflow causing out-of-bounds read/write, enabling potential crash or exploitation when a user processes a crafted TIFF. The issue affects libtiff/tiffcrop across multiple distributions; remediation is to upgrade to a fixed libtiff version (examples in co...

5.5CVSS5.9AI score0.00317EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/08/17 12:00 a.m.24 views

CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

3.1AI score
SaveExploits0References5
Cvelist
Cvelist
added 2022/08/17 12:00 a.m.42 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

6.2AI score0.00317EPSS
SaveExploits0References3
CVE
CVE
added 2022/08/17 12:00 a.m.175 views

CVE-2022-2868

CVE-2022-2868 affects libtiff’s tiffcrop utility, due to improper input validation that can lead to an out-of-bounds read and crash when processing a crafted TIFF file. Public advisories and vendor notes reference DoS/crash implications and provide fixes by updating libtiff to versions containing...

5.5CVSS5.9AI score0.00317EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:00 a.m.30 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2259)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff: heap-buffer-overflow in TIFFReadRawDataStriped in tiffinfo.c CVE-2022-1354 Note that Tenable Network Security has extracted the precedi...

5.5CVSS6.7AI score0.00543EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/17 12:00 a.m.33 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

3.5AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2022/08/17 12:00 a.m.29 views

CVE-2022-2867

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5.5CVSS6.1AI score0.00317EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/08/17 12:00 a.m.33 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/08/17 12:00 a.m.52 views

CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

5.5CVSS7.2AI score0.00317EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/08/17 12:00 a.m.45 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

5.5CVSS7.2AI score0.00317EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/08/16 11:38 p.m.58 views

CVE-2022-2867

A flaw was found in libtiff's tiffcrop utility that has a uint32t underflow that can lead to an out-of-bounds read and write. This flaw allows an attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parametersto cause a crash or, in some...

5.5CVSS4.7AI score0.00317EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/08/15 12:00 a.m.22 views

Mageia: Security Advisory (MGASA-2022-0284)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.01741EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:00 a.m.13 views

The vulnerability of the TIFFFetchStripThing() function in the LibTIFF library on Amazon Linux systems allows a hacker to trigger a service failure.

The vulnerability of the TIFFFetchStripThing function in the LibTIFF library is related to the use of uninitialized resources during the processing of TIFF files. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.8AI score0.00261EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2022/08/13 2:32 a.m.9 views

MGASA-2022-0284 Updated libtiff packages fix security vulnerability

A stack overflow was discovered in the TIFFVGetField function of Tiffsplit CVE-2022-34526...

6.5CVSS6.8AI score0.01741EPSS
SaveExploits1References3
Mageia
Mageia
added 2022/08/13 2:32 a.m.50 views

Updated libtiff packages fix security vulnerability

A stack overflow was discovered in the TIFFVGetField function of Tiffsplit CVE-2022-34526...

6.5CVSS3.9AI score0.01741EPSS
SaveExploits1References2
CBLMariner
CBLMariner
added 2022/08/12 4:45 p.m.13 views

CVE-2022-2056 affecting package libtiff 4.4.0-1

CVE-2022-2056 affecting package libtiff 4.4.0-1. A patched version of the package is available...

6.5CVSS6.9AI score0.01239EPSS
SaveExploits1
Rows per page
Query Builder