Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5604-1
HistorySep 08, 2022 - 12:00 a.m.

LibTIFF vulnerabilities

2022-09-0800:00:00
ubuntu.com
40
libtiff
ubuntu 16.04
ubuntu 14.04
esm
tiff library
denial of service
arbitrary code
cve-2022-2867
cve-2022-2869
cve-2022-2868

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

27.8%

JSON

Releases

  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

It was discovered that LibTIFF incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service,
or possibly execute arbitrary code. (CVE-2022-2867, CVE-2022-2869)

It was discovered that LibTIFF incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2022-2868)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibtiff-opengl< 4.0.6-1ubuntu0.8+esm3UNKNOWN
Ubuntu16.04noarchlibtiff-doc< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff-opengl< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff-opengl-dbgsym< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff-tools< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff-tools-dbgsym< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff5< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff5-dbgsym< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiff5-dev< 4.0.6-1ubuntu0.8UNKNOWN
Ubuntu16.04noarchlibtiffxx5< 4.0.6-1ubuntu0.8UNKNOWN
Rows per page:
1-10 of 291

Related

nessus 37
openvas 22
amazon 4
osv 9
ubuntucve 3
mageia 1
rosalinux 2
ibm 4
debiancve 3
nvd 3
cvelist 3
prion 3
suse 1
cve 3
alpinelinux 3
cbl_mariner 6
veracode 3
redhatcve 3
cnvd 2
rocky 1
oraclelinux 1
almalinux 1
redhat 6
cloudfoundry 1
ubuntu 1
debian 2
nessus
nessus
Amazon Linux 2 : libtiff (ALAS-2022-1872)
2022-11-09 00:00:00
EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2935)
2022-12-28 00:00:00
EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2909)
2022-12-28 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2657)
2022-11-03 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2909)
2022-12-30 00:00:00
Ubuntu: Security Advisory (USN-5604-1)
2022-09-16 00:00:00
amazon
amazon
Important: libtiff
2022-10-31 19:40:00
Important: libtiff
2022-10-31 19:40:00
Important: libtiff
2022-12-01 17:33:00
osv
osv
tiff vulnerabilities
2022-09-08 21:12:58
CVE-2022-2869
2022-08-17 22:15:08
CVE-2022-2867
2022-08-17 22:15:08
ubuntucve
ubuntucve
CVE-2022-2868
2022-08-17 00:00:00
CVE-2022-2867
2022-08-17 00:00:00
CVE-2022-2869
2022-08-17 00:00:00
mageia
mageia
Updated libtiff packages fix security vulnerability
2022-09-16 22:39:55
rosalinux
rosalinux
Advisory ROSA-SA-2023-2264
2023-10-22 05:35:45
Advisory ROSA-SA-2024-2338
2024-02-06 08:15:12
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF
2023-05-02 20:42:17
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-02-24 19:49:04
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
2023-03-30 16:55:28
debiancve
debiancve
CVE-2022-2869
2022-08-17 22:15:08
CVE-2022-2867
2022-08-17 22:15:08
CVE-2022-2868
2022-08-17 22:15:08
nvd
nvd
CVE-2022-2869
2022-08-17 22:15:08
CVE-2022-2868
2022-08-17 22:15:08
CVE-2022-2867
2022-08-17 22:15:08
cvelist
cvelist
CVE-2022-2869
2022-08-17 00:00:00
CVE-2022-2867
2022-08-17 00:00:00
CVE-2022-2868
2022-08-17 00:00:00
prion
prion
Out-of-bounds
2022-08-17 22:15:00
Out-of-bounds
2022-08-17 22:15:00
Out-of-bounds
2022-08-17 22:15:00
suse
suse
Security update for tiff (important)
2022-10-21 00:00:00
cve
cve
CVE-2022-2868
2022-08-17 22:15:08
CVE-2022-2869
2022-08-17 22:15:08
CVE-2022-2867
2022-08-17 22:15:08
alpinelinux
alpinelinux
CVE-2022-2869
2022-08-17 22:15:08
CVE-2022-2867
2022-08-17 22:15:08
CVE-2022-2868
2022-08-17 22:15:08
cbl_mariner
cbl_mariner
CVE-2022-2869 affecting package libtiff 4.4.0-2
2023-03-16 03:40:02
CVE-2022-2867 affecting package libtiff for versions less than 4.5.0-1
2023-04-16 01:04:22
CVE-2022-2869 affecting package libtiff for versions less than 4.5.0-1
2023-04-16 01:04:22
veracode
veracode
Denial Of Service (DOS)
2022-08-18 20:57:51
Denial Of Service (DoS)
2022-08-18 08:58:31
Denial Of Service (DoS)
2022-08-18 07:14:57
redhatcve
redhatcve
CVE-2022-2869
2022-08-17 00:08:28
CVE-2022-2867
2022-08-16 23:38:12
CVE-2022-2868
2022-08-17 00:08:19
cnvd
cnvd
LibTIFF input validation error vulnerability
2022-08-18 00:00:00
libtiff buffer overflow vulnerability (CNVD-2022-72103)
2022-08-18 00:00:00
rocky
rocky
libtiff security update
2023-01-12 08:25:25
oraclelinux
oraclelinux
libtiff security update
2023-01-12 00:00:00
almalinux
almalinux
Moderate: libtiff security update
2023-01-12 00:00:00
redhat
redhat
(RHSA-2023:0095) Moderate: libtiff security update
2023-01-12 08:25:25
(RHSA-2023:1286) Important: Migration Toolkit for Runtimes security bug fix and enhancement update
2023-03-16 07:48:59
(RHSA-2023:0794) Moderate: Red Hat Advanced Cluster Management 2.6.4 bug fixes and security updates
2023-02-15 18:58:10
cloudfoundry
cloudfoundry
USN-5714-1: LibTIFF vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2022-11-08 00:00:00
debian
debian
[SECURITY] [DLA 3278-1] tiff security update
2023-01-20 22:37:38
[SECURITY] [DSA 5333-1] tiff security update
2023-01-29 12:55:02

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

27.8%

JSON
Related for USN-5604-1
nessus37openvas22amazon4osv9ubuntucve3mageia1rosalinux2ibm4debiancve3nvd3cvelist3prion3suse1cve3alpinelinux3cbl_mariner6veracode3redhatcve3cnvd2rocky1oraclelinux1almalinux1redhat6cloudfoundry1ubuntu1debian2