Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-1354

Опубликовано: 31 авг. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

released

4.3.0-7
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

4.1.0+git191117-2ubuntu0.20.04.5
esm-infra/xenial

not-affected

code not present
focal

released

4.1.0+git191117-2ubuntu0.20.04.5
impish

ignored

end of life
jammy

released

4.3.0-6ubuntu0.1
trusty/esm

not-affected

code not present

Показывать по

EPSS

Процентиль: 6%
0.00027
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
больше 3 лет назад

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

CVSS3: 5.5
nvd
почти 3 года назад

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

CVSS3: 5.5
debian
почти 3 года назад

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFR ...

CVSS3: 5.5
github
почти 3 года назад

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

CVSS3: 5.5
fstec
больше 3 лет назад

Уязвимость функции TIFFReadRawDataStriped() компонента tiffinfo.c библиотеки LibTIFF, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 6%
0.00027
Низкий

5.5 Medium

CVSS3