Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5421-1
HistoryMay 16, 2022 - 12:00 a.m.

LibTIFF vulnerabilities

2022-05-1600:00:00
ubuntu.com
44

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

7.6 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.006 Low

EPSS

Percentile

78.9%

JSON

Releases

  • Ubuntu 21.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

It was discovered that LibTIFF incorrectly handled certain images.
An attacker could possibly use this issue to cause a crash,
resulting in a denial of service. This issue only affects
Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-35522)

Chintan Shah discovered that LibTIFF incorrectly handled memory when
handling certain images. An attacker could possibly use this issue to
cause a crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2022-0561, CVE-2022-0562, CVE-2022-0891)

It was discovered that LibTIFF incorrectly handled certain images.
An attacker could possibly use this issue to cause a crash,
resulting in a denial of service. This issue only affects
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2022-0865)

OSVersionArchitecturePackageVersionFilename
Ubuntu21.10noarchlibtiff5< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff-dev< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff-doc< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff-opengl< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff-opengl-dbgsym< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff-tools< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff-tools-dbgsym< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff5-dbgsym< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiff5-dev< 4.3.0-1ubuntu0.1UNKNOWN
Ubuntu21.10noarchlibtiffxx5< 4.3.0-1ubuntu0.1UNKNOWN
Rows per page:
1-10 of 581

Related

nessus 68
cloudfoundry 1
osv 14
photon 14
ibm 8
fedora 4
mageia 3
suse 3
debian 2
oraclelinux 3
redhat 6
almalinux 3
ubuntucve 8
archlinux 1
rocky 2
redhatcve 5
prion 6
debiancve 5
cbl_mariner 9
veracode 5
alpinelinux 6
cve 6
rosalinux 1
amazon 5
gentoo 2
altlinux 1
redos 8
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-5421-1)
2022-05-16 00:00:00
EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2022-1739)
2022-05-26 00:00:00
EulerOS 2.0 SP3 : compat-libtiff3 (EulerOS-SA-2022-1710)
2022-05-26 00:00:00
cloudfoundry
cloudfoundry
USN-5421-1: LibTIFF vulnerabilities | Cloud Foundry
2022-07-29 00:00:00
osv
osv
tiff vulnerabilities
2022-05-16 09:10:01
Moderate: libtiff security update
2022-11-08 06:23:40
tiff - security update
2022-03-24 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0169
2022-04-03 00:00:00
Important Photon OS Security Update - PHSA-2022-0458
2022-03-30 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0169
2022-04-03 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF
2023-01-30 16:23:02
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to denial of service due to CVE-2022-0865
2022-12-01 17:20:27
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to denial of service due to CVE-2022-0562
2022-12-01 17:30:29
fedora
fedora
[SECURITY] Fedora 35 Update: libtiff-4.3.0-4.fc35
2022-03-02 16:10:57
[SECURITY] Fedora 36 Update: libtiff-4.3.0-6.fc36
2022-04-03 00:15:59
[SECURITY] Fedora 35 Update: libtiff-4.3.0-6.fc35
2022-03-31 01:15:26
mageia
mageia
Updated libtiff packages fix security vulnerability
2022-03-06 13:40:17
Updated libtiff packages fix security vulnerability
2022-03-28 19:23:37
Updated libtiff packages fix security vulnerabilities
2021-03-04 15:26:19
suse
suse
Security update for tiff (important)
2022-05-30 00:00:00
Security update for tiff (important)
2022-02-17 00:00:00
Security update for tiff (important)
2022-10-21 00:00:00
debian
debian
[SECURITY] [DSA 5108-1] tiff security update
2022-03-24 18:55:21
[SECURITY] [DLA 2932-1] tiff security update
2022-03-06 17:18:56
oraclelinux
oraclelinux
libtiff security update
2022-11-15 00:00:00
libtiff security update
2022-11-22 00:00:00
libtiff security and bug fix update
2021-11-16 00:00:00
redhat
redhat
(RHSA-2022:7585) Moderate: libtiff security update
2022-11-08 06:23:40
(RHSA-2022:8194) Moderate: libtiff security update
2022-11-15 06:18:19
(RHSA-2021:4241) Moderate: libtiff security and bug fix update
2021-11-09 08:50:38
almalinux
almalinux
Moderate: libtiff security update
2022-11-08 00:00:00
Moderate: libtiff security update
2022-11-15 00:00:00
Moderate: libtiff security and bug fix update
2021-11-09 08:50:38
ubuntucve
ubuntucve
CVE-2022-34266
2022-07-19 00:00:00
CVE-2020-35522
2021-03-09 00:00:00
CVE-2022-0562
2022-02-11 00:00:00
archlinux
archlinux
[ASA-202204-6] libtiff: multiple issues
2022-04-05 00:00:00
rocky
rocky
libtiff security update
2022-11-08 06:23:40
libtiff security and bug fix update
2021-11-09 08:50:38
redhatcve
redhatcve
CVE-2020-35522
2021-02-23 20:03:21
CVE-2022-0865
2022-03-15 18:45:31
CVE-2022-0562
2022-02-15 05:18:42
prion
prion
Design/Logic Flaw
2021-03-09 20:15:00
Null pointer dereference
2022-02-11 18:15:00
Heap overflow
2022-03-10 17:44:00
debiancve
debiancve
CVE-2020-35522
2021-03-09 20:15:00
CVE-2022-0562
2022-02-11 18:15:00
CVE-2022-0561
2022-02-11 18:15:00
cbl_mariner
cbl_mariner
CVE-2020-35522 affecting package libtiff 4.1.0-3
2021-03-29 02:55:01
CVE-2020-35522 affecting package libtiff 4.1.0-3
2022-04-09 06:51:55
CVE-2022-0562 affecting package libtiff 4.3.0-1
2022-04-26 20:17:07
veracode
veracode
Denial Of Service (DoS)
2021-03-16 17:03:53
NULL Pointer Dereference
2022-02-14 12:56:55
Denial Of Service (DoS)
2022-04-21 20:53:24
alpinelinux
alpinelinux
CVE-2020-35522
2021-03-09 20:15:00
CVE-2022-0865
2022-03-10 17:44:00
CVE-2022-0562
2022-02-11 18:15:00
cve
cve
CVE-2020-35522
2021-03-09 20:15:00
CVE-2022-0562
2022-02-11 18:15:00
CVE-2022-0865
2022-03-10 17:44:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2338
2024-02-06 08:15:12
amazon
amazon
Medium: libtiff
2022-07-28 20:38:00
Medium: libtiff
2022-05-31 23:50:00
Medium: libtiff
2022-04-25 22:56:00
gentoo
gentoo
LibTIFF: Multiple Vulnerabilities
2022-10-31 00:00:00
libTIFF: Multiple vulnerabilities
2021-04-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package libtiff version 4.2.0-alt1
2020-12-25 00:00:00
redos
redos
ROS-2-598
2021-09-08 00:00:00
ROS-2-452
2021-09-08 00:00:00
ROS-2-576
2021-09-08 00:00:00

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

7.6 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.006 Low

EPSS

Percentile

78.9%

JSON
Related for USN-5421-1
nessus68cloudfoundry1osv14photon14ibm8fedora4mageia3suse3debian2oraclelinux3redhat6almalinux3ubuntucve8archlinux1rocky2redhatcve5prion6debiancve5cbl_mariner9veracode5alpinelinux6cve6rosalinux1amazon5gentoo2altlinux1redos8