DeutschShown in its original language — a full translation is planned for a future version.
libTIFF: Mehrere Schwachstellen
view advisory published 2022-10-23
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder weitere, nicht spezifizierte Auswirkungen zu verursachen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3627US | medium6.5 | — | ||
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-… | ||||
| CVE-2022-3626US | medium6.5 | — | ||
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denia… | ||||
| CVE-2022-3599US | medium6.5 | — | ||
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that comp… | ||||
| CVE-2022-3598US | medium6.5 | — | ||
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For… | ||||
| CVE-2022-3597US | medium6.5 | — | ||
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-… | ||||
| CVE-2022-3570US | medium5.5 | — | ||
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file w… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2025-19906 vom 2025-11-07external
- Red Hat Security Advisory RHSA-2023:2340 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2883 vom 2023-05-16external
- Amazon Linux Security Advisory ALAS-2023-2212 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS2-2026-3130 vom 2026-01-22external
- NIST Vulnerability Database vom 2022-10-23external
- Oracle Linux Security Advisory ELSA-2023-2883 vom 2023-05-24external
- Debian Security Advisory DLA-3278 vom 2023-01-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan