USN-5705-1 tiff vulnerabilities

Chintan Shah discovered that LibTIFF incorrectly handled memory in certain conditions. An attacker could trick a user into processing a specially crafted image file and potentially use this issue to allow for information disclosure or to cause the application to crash. CVE-2022-3570 It was...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72094)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for processing TIFF files.LibTIFF suffers from a buffer overflow vulnerability that stems from an out-of-bounds write in extractContigSamplesShifted24bits in...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72096)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for handling TIFF files.LibTIFF version 4.4.0 is vulnerable to a buffer overflow vulnerability, which stems from the existence of multiple heap buffer overflows th...

UBUNTU-CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72093)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. version 4.4.0 of LibTIFF is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds read in writeSingleSection in...

UBUNTU-CVE-2022-3598

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b...

CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72092)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for processing TIFF files.LibTIFF suffers from a buffer overflow vulnerability that originates in TIFFmemset in libtiff/tifunix.c:340 and exists when called from...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72091)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files.LibTIFF suffers from a buffer overflow vulnerability that originates in TIFFmemcpy in libtiff/tifunix.c:346, which has an out-of-bounds...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72095)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files.LibTIFF suffers from a buffer overflow vulnerability that originates in TIFFmemcpy in libtiff/tifunix.c:346, which has an out-of-bounds...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability is due to memory corruption in the function TIFFmemset of processCropSelections inside the tiffcrop.c file, which allows an attacker to crash the application via a malicious tiff file...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability is due to an out-of-bounds write using TIFFmemcpy in the extractImageSection function in tiffcrop.c which allows an attacker to cause an application crash via a crafted tiff file...

Denial Of Service (DoS)

libdiff.so is vulnerable to denial of service. The vulnerability is due to the multiple heap buffer overflows in tiffcrop.c, allowing an attacker to trigger unsafe or out-of-bounds memory access via maliciously crafted TIFF image, resulting in an application crash...

SUSE: Security Advisory (SUSE-SU-2022:3690-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The vulnerability is due to.the TIFFmemcpy function in libtiff/tifunix.c allowing a remote attacker to cause an out-of-bounds write via a crafted tiff file, resulting in denial of service conditions...

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections tools/tiffcrop.c:7619 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 236b7191.

...

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection tools/tiffcrop.c:6860 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 236b7191.

...

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit e8131125.

...

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash potential information disclosure or any other context-dependent impact

...

SUSE SLED15: libtiff-devel / libtiff-devel-32bit / libtiff5 / libtiff5-32bit / etc (SUSE-SU-2022:3690-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3690-1 advisory. - CVE-2022-2519: Fixed a double free in rotateImage bsc1202968. - CVE-2022-2520: Fixed a asserti...