Lucene search
+L

7935 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/25 12:00 a.m.9 views

Vulnerability of the processCropSelections() function (tools/tiffcrop.c) in the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability of the processCropSelections function tools/tiffcrop.c in the LibTIFF library arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

7.8CVSS6.8AI score0.00443EPSS
SaveExploits1References12Affected Software7
RedhatCVE
RedhatCVE
added 2023/01/24 4:36 a.m.46 views

CVE-2022-48281

A vulnerability was found in libtiff. This vulnerability occurs due to an issue in processCropSelections in the tools/tiffcrop.c function in LibTIFF that has a heap-based buffer overflow for example, "WRITE of size 307203" via a crafted TIFF image...

5.5CVSS5.6AI score0.00443EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2023/01/24 12:00 a.m.63 views

libtiff security update

4.4.0-5 - Bump release - Resolves: CVE-2022-2953 4.4.0-4 - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 4.4.0-3 - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 - Resolves: 2106768...

6.5CVSS2.2AI score0.01289EPSS
SaveExploits7
Redos
Redos
added 2023/01/24 12:00 a.m.28 views

ROS-20230124-03

Vulnerability of LibTIFF set of libraries and utilities for viewing, editing and converting TIFF files is related to the processCropSelections function of the tools/tiffcrop.c file of the TIFF Image Handler component. Exploitation of the vulnerability could allow an attacker acting remotely to se...

5.5CVSS6.3AI score0.00443EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/01/24 12:00 a.m.3 views

PT-2023-6790 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: A NULL pointer dereference in TIFFClose is caused by a failure to open an output file, such as a non-existent path or a path that requires permissions like /dev/null, while specifying zones...

8.8CVSS7AI score0.02187EPSS
SaveExploits56References326
Tenable Nessus
Tenable Nessus
added 2023/01/24 12:00 a.m.65 views

Oracle Linux 9 : libtiff (ELSA-2023-0302)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0302 advisory. - Resolves: CVE-2022-2953 - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 Tenable has extracted t...

6.5CVSS6.6AI score0.01289EPSS
SaveExploits7References8
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.48 views

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

6.5CVSS6.6AI score0.01289EPSS
SaveExploits7References6
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.9 views

libtiff: Double free or corruption in rotateImage() function at tiffcrop.c

A double-free flaw was found in the tiffcrop tool distributed with the libtiff tools package. The double-free issue leads to a denial of service, impacting the availability...

6.5CVSS5.7AI score0.01236EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.9 views

libtiff: division by zero issues in tiffcrop

A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of service via a crafted tiff file...

6.5CVSS7.3AI score0.01239EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.11 views

libtiff: Assertion fail in rotateImage() function at tiffcrop.c

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

6.5CVSS5.7AI score0.01179EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.11 views

libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

6.5CVSS5.7AI score0.01247EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.9 views

libtiff: division by zero issues in tiffcrop

A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of service via a crafted tiff file...

6.5CVSS7.3AI score0.01289EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.8 views

libtiff: division by zero issues in tiffcrop

A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of service via a crafted tiff file...

6.5CVSS7.3AI score0.01239EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/01/23 3:29 p.m.12 views

libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c

An out-of-bound read flaw was found in LibTIFF, in extractImageSection in the tools/tiffcrop.c:6905, allowing attackers to cause a denial of service via a crafted tiff file...

5.5CVSS5.8AI score0.00566EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/23 2:29 p.m.32 views

RLSA-2023:0302 Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from Divide By Zero Error CVE-2022-2056, CVE-2022-2057, CVE-2022-2058 libtiff: Double free or corruption in rotateImage function at tiffcrop.c CVE-2022-2519...

6.5CVSS6.9AI score0.01289EPSS
SaveExploits7References6
Rockylinux
Rockylinux
added 2023/01/23 2:29 p.m.51 views

libtiff security update

An update is available for libtiff. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtiff packages contain a library of functions for manipulating Tagged...

6.5CVSS7.1AI score0.01289EPSS
SaveExploits7
NVD
NVD
added 2023/01/23 3:15 a.m.30 views

CVE-2022-48281

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

5.5CVSS6.6AI score0.00443EPSS
SaveExploits1References6
OSV
OSV
added 2023/01/23 3:15 a.m.11 views

AZL-13151 CVE-2022-48281 affecting package libtiff for versions less than 4.4.0-7

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

5.5CVSS6.9AI score0.00443EPSS
SaveExploits1References1
Prion
Prion
added 2023/01/23 3:15 a.m.37 views

Heap overflow

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

1.9CVSS5.7AI score0.00443EPSS
SaveExploits1References6Affected Software2
OSV
OSV
added 2023/01/23 3:15 a.m.6 views

UBUNTU-CVE-2022-48281

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

5.5CVSS6.9AI score0.00443EPSS
SaveExploits1References4
Rows per page
Query Builder