MGASA-2022-0087 Updated libtiff packages fix security vulnerability

Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. CVE-2022-0561 Null source pointer passed as an argument to memcpy function within TIFFReadDirector...

NULL Pointer Dereference

libtiff.so is vulnerable to null pointer dereference. The vulnerability exists in TIFFReadDirectory function of tifdirread.c which allows an attacker to parse crafted TIFF image causing a denial of service...

CVE-2022-0562

Null source pointer passed as an argument to memcpy function within TIFFReadDirectory in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c...

CVE-2022-0562: NULL Pointer Dereference

Null source pointer passed as an argument to memcpy function within TIFFReadDirectory in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c...

PT-2022-4798

Name of the Vulnerable Software and Affected Versions libtiff versions 4.0 through 4.3.0 Description The issue is related to errors in pointer dereferencing in the TIFFReadDirectory function of the LibTIFF library, specifically in the tif dirread.c component. This can be exploited by a remote...

libtiff 代码问题漏洞

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in libtiff versions 3.9.0 through 4.3.0, which stems from softwar...

DEBIAN-CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

Stack overflow

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213: Uncontrolled Recursion

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service. An integer overflow in the TIFFReadDirectory function in tifdirread.c allows a remote attacker to crash the application, or potentially execute arbitrary code, by passing a negative tile depth in a tiff image to cause a heap-based buffer overflow...

Invalid Write

libtiff.so is vulnerable to invalid write attacks. The vulnerability exists in the TIFFReadDirectory function of libtiff/tifdirread.c where field data for extension tags can be written to invalid memory locations...

LibTIFF - 'tif_dirwrite.c' Denial of Service

Source: http://bugzilla.maptools.org/showbug.cgi?id=2712 Triggered by "./tiffset POC1" $ ./tiffset POC1 TIFFReadDirectory: Warning, Unknown field with tag 302 0x12e encountered. TIFFReadDirectory: Warning, Unknown field with tag 61961 0xf209 encountered. poc3: AdobeDeflate compression support is...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

Integer overflow

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

CVE-2012-2088

CVE-2012-2088 affects libtiff up to version 3.9.4 (and earlier) via the TIFFReadDirectory in tif_dirread.c, where a signedness error with a negative tile depth can trigger a heap-based buffer overflow, enabling denial of service and potentially arbitrary code execution. Related advisories and Nes...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

CVE-2012-2088: Undefined Security Weakness

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...