Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-1354HistoryAug 31, 2022 - 4:15 p.m.
CVE-2022-1354
2022-08-3116:15:09
Debian Security Bug Tracker
security-tracker.debian.org
29
libtiffs
tiffinfo.c
buffer overflow
denial of service
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
38.5%
A heap buffer overflow flaw was found in Libtiffs’ tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | tiff | < 4.3.0-7 | tiff_4.3.0-7_all.deb |
| Debian | 11 | all | tiff | < 4.2.0-1+deb11u3 | tiff_4.2.0-1+deb11u3_all.deb |
| Debian | 999 | all | tiff | < 4.3.0-7 | tiff_4.3.0-7_all.deb |
| Debian | 13 | all | tiff | < 4.3.0-7 | tiff_4.3.0-7_all.deb |
Related
nessus
nessus
EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2867)
2022-12-27 00:00:00
EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-2297)
2022-09-14 00:00:00
EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2259)
2022-08-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-09-01 12:27:04
ubuntucve
ubuntucve
CVE-2022-1354
2022-08-31 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2326)
2022-09-14 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2867)
2022-12-28 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2297)
2022-09-14 00:00:00
osv
osv
CVE-2022-1354
2022-08-31 16:15:09
tiff vulnerabilities
2022-09-20 08:29:18
Moderate: libtiff security update
2022-11-15 00:00:00
cve
cve
CVE-2022-1354
2022-08-31 16:15:09
redhatcve
redhatcve
CVE-2022-1354
2022-04-14 12:31:31
cvelist
cvelist
CVE-2022-1354
2022-08-31 00:00:00
prion
prion
Heap overflow
2022-08-31 16:15:00
cnvd
cnvd
LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72098)
2022-09-05 00:00:00
nvd
nvd
CVE-2022-1354
2022-08-31 16:15:09
mageia
mageia
Updated libtiff packages fix security vulnerability
2022-06-24 23:50:43
fedora
fedora
[SECURITY] Fedora 36 Update: libtiff-4.4.0-1.fc36
2022-06-20 00:40:20
[SECURITY] Fedora 35 Update: libtiff-4.4.0-1.fc35
2022-06-22 01:25:14
cloudfoundry
cloudfoundry
USN-5619-1: LibTIFF vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2022-09-20 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2022:8194) Moderate: libtiff security update
2022-11-15 06:18:19
oraclelinux
oraclelinux
libtiff security update
2022-11-22 00:00:00
almalinux
almalinux
Moderate: libtiff security update
2022-11-15 00:00:00
gentoo
gentoo
LibTIFF: Multiple Vulnerabilities
2022-10-31 00:00:00
debian
debian
[SECURITY] [DLA 3278-1] tiff security update
2023-01-20 22:37:38
[SECURITY] [DSA 5333-1] tiff security update
2023-01-29 12:55:02
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
38.5%
Related for DEBIANCVE:CVE-2022-1354