REDHAT-BUG-2064148: Medium severity tiff vulnerability

Published Mar 15, 2022

Updated

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.

https://gitlab.com/libtiff/libtiff/-/mergerequests/311 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0924.json https://gitlab.com/libtiff/libtiff/-/issues/278

Affected Software

1 affected component

LibTIFF libtiff

Event History

Mar 15, 2022

Data Sourced

via Red Hat·07:14 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must an attacker provide to trigger the issue?

An attacker needs to supply a crafted TIFF file that is processed by the tiffcp utility.

What is the practical impact of successful exploitation?

Successful exploitation can cause a denial of service through an out-of-bounds read in tiffcp.

What can source-built deployments do if they need the fix?

Users compiling libtiff from source can apply the fix available in commit 408976c4.

REDHAT-BUG-2064148: Medium severity tiff vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the practical impact of successful exploitation?

What can source-built deployments do if they need the fix?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the practical impact of successful exploitation?

What can source-built deployments do if they need the fix?