CVE-2022-34526

Опубликовано: 29 июл. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.

Ссылки

https://gitlab.com/libtiff/libtiff/-/issues/433
Exploit
Issue Tracking
Patch
Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/486
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FC6LWPAEKYJ57LSHX4SBFMLRMLOZTHIJ/
https://security.netapp.com/advisory/ntap-20220930-0002/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5333
Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/433
Exploit
Issue Tracking
Patch
Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/486
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FC6LWPAEKYJ57LSHX4SBFMLRMLOZTHIJ/
https://security.netapp.com/advisory/ntap-20220930-0002/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5333
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libtiff:libtiff:4.4.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00193

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2022-34526

CVSS3: 6.5

ubuntu

больше 3 лет назад

CVE-2022-34526

CVSS3: 6.5

redhat

больше 3 лет назад

CVE-2022-34526

CVSS3: 6.5

msrc

больше 3 лет назад

CVE-2022-34526

CVSS3: 6.5

debian

больше 3 лет назад

A stack overflow was discovered in the _TIFFVGetField function of Tiff ...

GHSA-3fv6-vw38-4m6q

CVSS3: 6.5

github

больше 3 лет назад

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file.

EPSS

Процентиль: 41%

0.00193

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-787