DeutschShown in its original language — a full translation is planned for a future version.
libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2022-08-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2869US | medium5.5 | Exploit | ||
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to ti… | ||||
| CVE-2022-2868US | medium5.5 | — | ||
libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to… | ||||
| CVE-2022-2867US | medium5.5 | — | ||
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user t… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2025-19906 vom 2025-11-07external
- Red Hat Security Advisory RHSA-2023:0095 vom 2023-01-12external
- Amazon Linux Security Advisory ALAS-2022-1872 vom 2022-11-09external
- Amazon Linux Security Advisory ALAS-2022-183 vom 2022-11-04external
- Amazon Linux Security Advisory ALAS-2022-1647 vom 2022-12-10external
- Red Hat Bugzilla - Bug 2118847 vom 2022-08-17external
- Red Hat Bugzilla - Bug 2118863 vom 2022-08-17external
- Red Hat Bugzilla - Bug 2118869 vom 2022-08-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan