Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-1056

Опубликовано: 28 мар. 2022
Источник: debian

Описание

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tifffixed4.4.0~rc1-1package

Примечания

  • https://gitlab.com/libtiff/libtiff/-/issues/391

  • https://gitlab.com/libtiff/libtiff/-/merge_requests/307

  • https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c (v4.4.0rc1)

  • Crash in CLI tool, no security impact

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS3: 5.5
redhat
почти 4 года назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS3: 5.5
nvd
почти 4 года назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS3: 5.5
msrc
почти 4 года назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 46dc8fcd.

CVSS3: 5.5
github
почти 4 года назад

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.