Lucene search
+L

55 matches found

CVE
CVE
•added 2022/08/29 12:00 a.m.•224 views

CVE-2022-2953

CVE-2022-2953 affects LibTIFF 4.4.0 with an out-of-bounds read in extractImageSection (tools/tiffcrop.c:6905), enabling DoS via crafted TIFF files. A fix is available via commit 48d6ece8389b01129e7d357f0985c8f938ce3da3. Connected advisories show mitigations for various platforms (e.g., Amazon Lin...

5.5CVSS5.7AI score0.00573EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2022/08/29 12:00 a.m.•7 views

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from a security vulnerability that stems from the lack of proper validation of user-supplied data by extractImageSection...

5.5CVSS6.5AI score0.00573EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/29 12:00 a.m.•3 views

CVE-2022-2953: Out-of-bounds Read

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8...

5.5CVSS6.4AI score0.00573EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2022/08/29 12:00 a.m.•45 views

CVE-2022-2953

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8...

5.5CVSS6AI score0.00573EPSS
SaveExploits1
Veracode
Veracode
•added 2022/04/21 8:53 p.m.•36 views

Denial Of Service (DoS)

tiff is vulnerable to denial of service. A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any...

7.1CVSS3.8AI score0.01542EPSS
SaveExploits2References13Affected Software3
OSV
OSV
•added 2022/03/10 5:44 p.m.•15 views

AZL-8968 CVE-2022-0891 affecting package libtiff for versions less than 4.3.0-2

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS7AI score0.01542EPSS
SaveExploits2References1
OSV
OSV
•added 2022/03/10 5:44 p.m.•7 views

ALPINE-CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS7AI score0.01542EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/03/10 5:44 p.m.•14 views

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS6.9AI score0.01542EPSS
SaveExploits2References12Affected Software1
OSV
OSV
•added 2022/03/10 5:44 p.m.•8 views

UBUNTU-CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS7AI score0.01542EPSS
SaveExploits2References8
Prion
Prion
•added 2022/03/10 5:44 p.m.•27 views

Heap overflow

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

5.8CVSS6.2AI score0.01542EPSS
SaveExploits2References9Affected Software3
OSV
OSV
•added 2022/03/09 12:00 a.m.•40 views

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

6.1CVSS6AI score
SaveExploits0References11
CNNVD
CNNVD
•added 2022/03/09 12:00 a.m.•7 views

Silicon Graphics LibTIFF 缓冲区错误漏洞

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF, which stems from an attacker's abili...

7.1CVSS7AI score0.01542EPSS
SaveExploits2References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•4 views

CVE-2022-0891: Out-of-bounds Write

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS7.1AI score0.01542EPSS
SaveExploits2References2
AlpineLinux
AlpineLinux
•added 2022/03/09 12:00 a.m.•48 views

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS7.5AI score0.01542EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2022/03/09 12:00 a.m.•52 views

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS7.9AI score0.01542EPSS
SaveExploits2
Rows per page
Query Builder