rpm package
suse/tiff&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-40090 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Aug 22, 2023 | An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. | ||
| CVE-2023-26965 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Jun 14, 2023 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. | ||
| CVE-2023-2731 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 17, 2023 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a | ||
| CVE-2023-1916 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Apr 10, 2023 | A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff | ||
| CVE-2022-48281 | — | < 4.0.9-150000.45.25.1 | 4.0.9-150000.45.25.1 | Jan 23, 2023 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. | ||
| CVE-2022-1622 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 11, 2022 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. |
- CVE-2022-40090Aug 22, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
- CVE-2023-26965Jun 14, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
- CVE-2023-2731May 17, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a
- CVE-2023-1916Apr 10, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff
- CVE-2022-48281Jan 23, 2023affected < 4.0.9-150000.45.25.1fixed 4.0.9-150000.45.25.1
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
- CVE-2022-1622May 11, 2022affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.