AZL-11284 CVE-2022-3597 affecting package libtiff for versions less than 4.4.0-6

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files.LibTIFF suffers from a buffer overflow vulnerability that originates in TIFFmemcpy in libtiff/tifunix.c:346, which has an out-of-bounds...

The vulnerability of the _TIFFmemcpy function in the tif_unix.c component of the LibTIFF library, which is related to writing beyond the buffer boundary, allows a hacker to trigger a service failure.

The vulnerability of the TIFFmemcpy function in the tifunix.c component of the LibTIFF library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

PT-2022-6890 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds write in the TIFFmemcpy function, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be triggered when TIFFmemcpy is called from...

LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.

...

PT-2022-4783 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.3.0 Description: The issue is related to an out-of-bounds read in the TIFFmemcpy function in tif unix.c, which can occur under certain conditions involving a custom tag and 0x0200 as the second word of the DE field. This can...

PT-2023-4821 · Libtiff +1 · Libtiff +1

Name of the Vulnerable Software and Affected Versions: libtiff version 4.0.10 Description: The issue is related to a heap buffer overflow in the TIFFmemcpy function in tif unix.c of the libtiff library. This allows an attacker to cause a denial-of-service through a crafted tiff file. The...

DEBIAN-CVE-2020-19144

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in TIFFmemcpy' funtion in the component 'tifunix.c'...

PT-2021-6708 · Libtiff +2 · Libtiff +2

Name of the Vulnerable Software and Affected Versions: LibTiff version 4.0.10 Description: The issue is related to a buffer overflow in the TIFFmemcpy function within the tif unix.c component of the LibTiff library. This allows attackers to cause a denial of service. The vulnerability can be...

Silicon Graphics LibTIFF 缓冲区错误漏洞

Libtiff is a library for reading and writing tagged image file format abbreviated as TIFF files. a buffer overflow vulnerability exists in LibTiff version 4.0.10. An attacker can exploit this vulnerability to cause a denial of service via the in TIFFmemcpy function in tifunix.c...