Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-1056

Опубликовано: 28 мар. 2022
Источник: debian
EPSS Низкий

Описание

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tifffixed4.4.0~rc1-1package

Примечания

  • https://gitlab.com/libtiff/libtiff/-/issues/391

  • https://gitlab.com/libtiff/libtiff/-/merge_requests/307

  • https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c (v4.4.0rc1)

  • Crash in CLI tool, no security impact

EPSS

Процентиль: 20%
0.00062
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS3: 5.5
redhat
больше 3 лет назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS3: 5.5
nvd
больше 3 лет назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS3: 5.5
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 5.5
github
больше 3 лет назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

EPSS

Процентиль: 20%
0.00062
Низкий