Veracode Vulnerability DatabaseVERACODE:36877Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
14.5%
libtiff.so is vulnerable to denial of service. The vulnerability exists in rotateImage function in tiffcrop.c due to a double-free vulnerability which allows an attacker to cause an application crash via a malicious input.
References
access.redhat.com/errata/RHSA-2023:0095
access.redhat.com/errata/RHSA-2023:0302
access.redhat.com/security/cve/CVE-2022-2519
bugzilla.redhat.com/show_bug.cgi?id=2122789
github.com/advisories/GHSA-9rcr-wwr3-q567
gitlab.com/libtiff/libtiff/-/issues/423
gitlab.com/libtiff/libtiff/-/merge_requests/378
gitlab.com/libtiff/libtiff/-/merge_requests/378/diffs?commit_id=8fe3735942ea1d90d8cef843b55b3efe8ab6feaf
www.debian.org/security/2023/dsa-5333
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
14.5%