Описание
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4.0.9-5ubuntu0.7 |
| devel | not-affected | 4.4.0-4ubuntu3 |
| esm-infra-legacy/trusty | not-affected | 4.0.3-7ubuntu0.11+esm4 |
| esm-infra/bionic | not-affected | 4.0.9-5ubuntu0.7 |
| esm-infra/focal | not-affected | 4.1.0+git191117-2ubuntu0.20.04.5 |
| esm-infra/xenial | released | 4.0.6-1ubuntu0.8+esm4 |
| focal | released | 4.1.0+git191117-2ubuntu0.20.04.5 |
| impish | ignored | end of life |
| jammy | released | 4.3.0-6ubuntu0.1 |
| trusty/esm | released | 4.0.3-7ubuntu0.11+esm4 |
Показывать по
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() ...
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
Уязвимость функции main() компонента tiffcp.c библиотеки LibTIFF, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании
EPSS
6.1 Medium
CVSS3