LibTIFF tiff2ps resource consumption

...

The vulnerability of the invertImage() function in the tiffcrop component of the LibTIFF library, related to writing beyond buffer boundaries, allows a malicious actor to trigger a service failure.

The vulnerability of the invertImage function in the tiffcrop component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the _TIFFmemcpy function in the tif_unix.c component of the LibTIFF library, which is related to writing beyond the buffer boundary, allows a hacker to trigger a service failure.

The vulnerability of the TIFFmemcpy function in the tifunix.c component of the LibTIFF library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2020-35524 affecting package libtiff for versions less than 4.1.0-3

CVE-2020-35524 affecting package libtiff for versions less than 4.1.0-3. A patched version of the package is available...

CVE-2020-35521 affecting package libtiff for versions less than 4.1.0-3

CVE-2020-35521 affecting package libtiff for versions less than 4.1.0-3. A patched version of the package is available...

CVE-2020-35522 affecting package libtiff for versions less than 4.1.0-3

CVE-2020-35522 affecting package libtiff for versions less than 4.1.0-3. A patched version of the package is available...

CVE-2020-35523 affecting package libtiff for versions less than 4.1.0-3

CVE-2020-35523 affecting package libtiff for versions less than 4.1.0-3. A patched version of the package is available...

OESA-2022-1607 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

CVE-2022-0561 affecting package libtiff 4.1.0-3

CVE-2022-0561 affecting package libtiff 4.1.0-3. A patched version of the package is available...

CVE-2022-0891 affecting package libtiff 4.1.0-3

CVE-2022-0891 affecting package libtiff 4.1.0-3. A patched version of the package is available...

CVE-2022-0562 affecting package libtiff 4.1.0-3

CVE-2022-0562 affecting package libtiff 4.1.0-3. A patched version of the package is available...

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 46dc8fcd.

...

[ASA-202204-6] libtiff: multiple issues

Arch Linux Security Advisory ASA-202204-6 ========================================= Severity: High Date : 2022-04-05 CVE-ID : CVE-2022-0561 CVE-2022-0562 CVE-2022-0865 CVE-2022-0891 CVE-2022-0907 CVE-2022-0908 CVE-2022-0909 CVE-2022-0924 CVE-2022-22844 Package : libtiff Type : multiple issues...

Denial Of Service (DoS)

LibTIFF is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization via the TIFF File Handler of tiff2ps allowing an attacker to crash the system...

Mageia: Security Advisory (MGASA-2022-0128)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...

AZL-9302 CVE-2022-1210 affecting package libtiff for versions less than 4.4.0-1

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...

DEBIAN-CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...

CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...

UBUNTU-CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...