Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-48281

Опубликовано: 23 янв. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

РелизСтатусПримечание
bionic

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

DNE

trusty

ignored

end of standard support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

4.5.0-6ubuntu1
esm-infra-legacy/trusty

not-affected

4.0.3-7ubuntu0.11+esm6
esm-infra/bionic

released

4.0.9-5ubuntu0.10+esm2
esm-infra/focal

not-affected

4.1.0+git191117-2ubuntu0.20.04.9
esm-infra/xenial

released

4.0.6-1ubuntu0.8+esm9
focal

released

4.1.0+git191117-2ubuntu0.20.04.9
jammy

released

4.3.0-6ubuntu0.5
kinetic

ignored

end of life, was needed
lunar

not-affected

4.5.0-5ubuntu1

Показывать по

EPSS

Процентиль: 0%
0.00007
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
больше 2 лет назад

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

CVSS3: 5.5
nvd
больше 2 лет назад

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

CVSS3: 5.5
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 5.5
debian
больше 2 лет назад

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has ...

suse-cvrf
больше 2 лет назад

Security update for tiff

EPSS

Процентиль: 0%
0.00007
Низкий

5.5 Medium

CVSS3

Уязвимость CVE-2022-48281