rpm package

almalinux/libtiff

pkg:rpm/almalinux/libtiff

Vulnerabilities (66)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-4645	Med	6.8	< 4.4.0-7.el9	4.4.0-7.el9	Mar 3, 2023	LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
CVE-2023-0804	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0803	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0802	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0801	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available w
CVE-2023-0800	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0799	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2023-0798	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2023-0797	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available wi
CVE-2023-0796	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2023-0795	Med	6.8	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Feb 13, 2023	LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2022-48281	Med	5.5	< 4.4.0-8.el9_2	4.4.0-8.el9_2	Jan 23, 2023	processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
CVE-2022-3970	Med	6.3	< 4.4.0-7.el9	4.4.0-7.el9	Nov 13, 2022	A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t
CVE-2022-3627	Med	5.5	< 4.4.0-7.el9	4.4.0-7.el9	Oct 21, 2022	LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availabl
CVE-2022-3626	Med	5.5	< 4.4.0-7.el9	4.4.0-7.el9	Oct 21, 2022	LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availa
CVE-2022-3599	Med	5.5	< 4.4.0-7.el9	4.4.0-7.el9	Oct 21, 2022	LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
CVE-2022-3598	Med	5.5	< 4.4.0-7.el9	4.4.0-7.el9	Oct 21, 2022	LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.
CVE-2022-3597	Med	5.5	< 4.4.0-7.el9	4.4.0-7.el9	Oct 21, 2022	LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availabl
CVE-2022-3570	Hig	7.7	< 4.4.0-7.el9	4.4.0-7.el9	Oct 21, 2022	Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-depe
CVE-2022-2521	Med	6.5	< 4.0.9-26.el8_7	4.0.9-26.el8_7	Aug 31, 2022	It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.

CVE-2022-4645MedMar 3, 2023
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
CVE-2023-0804MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0803MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0802MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0801MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available w
CVE-2023-0800MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
CVE-2023-0799MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2023-0798MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2023-0797MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available wi
CVE-2023-0796MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2023-0795MedFeb 13, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
CVE-2022-48281MedJan 23, 2023
affected < 4.4.0-8.el9_2fixed 4.4.0-8.el9_2
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
CVE-2022-3970MedNov 13, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t
CVE-2022-3627MedOct 21, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availabl
CVE-2022-3626MedOct 21, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availa
CVE-2022-3599MedOct 21, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
CVE-2022-3598MedOct 21, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.
CVE-2022-3597MedOct 21, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availabl
CVE-2022-3570HigOct 21, 2022
affected < 4.4.0-7.el9fixed 4.4.0-7.el9
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-depe
CVE-2022-2521MedAug 31, 2022
affected < 4.0.9-26.el8_7fixed 4.0.9-26.el8_7
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.

Page 2 of 4