REDHAT-BUG-2074404: Low severity tiff vulnerability
Published Apr 12, 2022
·Updated
A heap-buffer-overflow flaw was found in TIFFReadRawDataStriped() function in tiffinfo.c.
References: https://gitlab.com/libtiff/libtiff/-/issues/319 https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798
Affected Software
1 affected component
LibTIFF libtiff
Event History
Apr 12, 2022
Data Sourced
via Red Hat·07:52 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2074404?
The severity of REDHAT-BUG-2074404 is classified as a heap-buffer-overflow vulnerability.
2
How do I fix REDHAT-BUG-2074404?
To fix REDHAT-BUG-2074404, update to the latest version of the LibTIFF library that addresses this heap-buffer-overflow flaw.
3
What causes the vulnerability in REDHAT-BUG-2074404?
The vulnerability in REDHAT-BUG-2074404 is caused by a flaw in the TIFFReadRawDataStriped() function which can lead to heap-buffer overflow.
4
Which software is affected by REDHAT-BUG-2074404?
LibTIFF is the software affected by the vulnerability REDHAT-BUG-2074404.
5
Are there any known exploits for REDHAT-BUG-2074404?
As of now, there are no publicly known exploits for the vulnerability REDHAT-BUG-2074404.