Lucene search
+L

8920 matches found

Prion
Prion
•added 2022/08/17 10:15 p.m.•21 views

Out-of-bounds

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

1.9CVSS5.8AI score0.0032EPSS
SaveExploits0References3Affected Software3
Prion
Prion
•added 2022/08/17 10:15 p.m.•25 views

Out-of-bounds

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

1.9CVSS5.7AI score0.0032EPSS
SaveExploits0References3Affected Software3
osv_ubuntu
osv_ubuntu
•added 2022/08/17 10:15 p.m.•20 views

UBUNTU-CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

5.5CVSS6.8AI score0.0032EPSS
SaveExploits0References5
Prion
Prion
•added 2022/08/17 10:15 p.m.•35 views

Out-of-bounds

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

1.9CVSS5.8AI score0.0032EPSS
SaveExploits0References3Affected Software3
UbuntuCve
UbuntuCve
•added 2022/08/17 11:19 a.m.•48 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

5.5CVSS6.8AI score0.0032EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/08/17 11:19 a.m.•57 views

CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

5.5CVSS6.8AI score0.0032EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/08/17 11:19 a.m.•47 views

CVE-2022-2867

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5.5CVSS6.8AI score0.0032EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/08/17 12:08 a.m.•52 views

CVE-2022-2869

A flaw was found in libtiff's tiffcrop tool that has a uint32t underflow, which leads to an out-of-bounds read and write in the extractContigSamples8bits routine. This flaw allows an attacker who supplies a crafted file to tiffcrop to trick a user into opening the crafted file with tiffcrop,...

5.5CVSS3.4AI score0.0032EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/08/17 12:08 a.m.•42 views

CVE-2022-2868

An improper input validation flaw was found in libtiff's tiffcrop utility. This issue can lead to an out-of-bounds read and cause a crash if an attacker can supply a crafted file to tiffcrop...

5.5CVSS3.2AI score0.0032EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/08/17 12:00 a.m.•39 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

3.5AI score
SaveExploits0References5
osv_cve
osv_cve
•added 2022/08/17 12:00 a.m.•43 views

CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

3.1AI score
SaveExploits0References5
Mend
Mend
•added 2022/08/17 12:00 a.m.•2 views

CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

6.8CVSS0.0032EPSS
SaveExploits0References8
CVE
CVE
•added 2022/08/17 12:00 a.m.•210 views

CVE-2022-2867

libtiff’s tiffcrop utility has a uint32 underflow causing out-of-bounds read/write, enabling potential crash or exploitation when a user processes a crafted TIFF. The issue affects libtiff/tiffcrop across multiple distributions; remediation is to upgrade to a fixed libtiff version (examples in co...

5.5CVSS5.9AI score0.0032EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2022/08/17 12:00 a.m.•2 views

CVE-2022-2869

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

6.8CVSS0.0032EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2022/08/17 12:00 a.m.•32 views

CVE-2022-2867

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2022/08/17 12:00 a.m.•8 views

LibTIFF 数字错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A numeric error vulnerability exists in the LibTIFF tiffcrop utility, which stems from having a uint32t underflow, which can lead to...

5.5CVSS7AI score0.0032EPSS
SaveExploits0References11
CVE
CVE
•added 2022/08/17 12:00 a.m.•222 views

CVE-2022-2869

CVE-2022-2869 affects libtiff’s tiffcrop tool, caused by a uint32_t underflow in extractContigSamples8bits that enables out-of-bounds read/write when processing a crafted TIFF file. An attacker could coerce a user to open a crafted file with tiffcrop, potentially crashing the application or enabl...

5.5CVSS5.9AI score0.0032EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/17 12:00 a.m.•6 views

CVE-2022-2867: Integer Underflow (Wrap or Wraparound)

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5.5CVSS6AI score0.0032EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/17 12:00 a.m.•5 views

CVE-2022-2868: Improper Input Validation

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

5.5CVSS6AI score0.0032EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/17 12:00 a.m.•7 views

CVE-2022-2869: Integer Underflow (Wrap or Wraparound)

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

5.5CVSS6AI score0.0032EPSS
SaveExploits0References4
Rows per page
Query Builder