5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
28.2%
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library
Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory
access via crafted TIFF image file which could result into application
crash, potential information disclosure or any other context-dependent
impact
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | tiff | < 4.0.9-5ubuntu0.8 | UNKNOWN |
ubuntu | 20.04 | noarch | tiff | < 4.1.0+git191117-2ubuntu0.20.04.6 | UNKNOWN |
ubuntu | 22.04 | noarch | tiff | < 4.3.0-6ubuntu0.2 | UNKNOWN |
ubuntu | 22.10 | noarch | tiff | < 4.4.0-4ubuntu3.1 | UNKNOWN |
ubuntu | 23.04 | noarch | tiff | < 4.4.0-4ubuntu3.1 | UNKNOWN |
ubuntu | 14.04 | noarch | tiff | < 4.0.3-7ubuntu0.11+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 16.04 | noarch | tiff | < 4.0.6-1ubuntu0.8+esm6) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.json
gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094c
gitlab.com/libtiff/libtiff/-/issues/381
gitlab.com/libtiff/libtiff/-/issues/386
launchpad.net/bugs/cve/CVE-2022-3570
nvd.nist.gov/vuln/detail/CVE-2022-3570
security-tracker.debian.org/tracker/CVE-2022-3570
ubuntu.com/security/notices/USN-5705-1
ubuntu.com/security/notices/USN-5714-1
www.cve.org/CVERecord?id=CVE-2022-3570
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
28.2%