Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2022-1354
HistoryAug 31, 2022 - 4:15 p.m.

CVE-2022-1354

2022-08-3116:15:09
Google
osv.dev
10
cve-2022-1354
libtiffs
tiffreadrawdatastriped
denial of service
software

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

A heap buffer overflow flaw was found in Libtiffs’ tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

Related

veracode 1
nessus 22
ubuntucve 1
openvas 14
cve 1
redhatcve 1
debiancve 1
cvelist 1
prion 1
cnvd 1
nvd 1
mageia 1
fedora 2
cloudfoundry 1
osv 4
ubuntu 1
ibm 1
redhat 1
oraclelinux 1
almalinux 1
gentoo 1
debian 2
veracode
veracode
Denial Of Service (DoS)
2022-09-01 12:27:04
nessus
nessus
EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2867)
2022-12-27 00:00:00
EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-2326)
2022-09-14 00:00:00
EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2885)
2022-12-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-1354
2022-08-31 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2326)
2022-09-14 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2867)
2022-12-28 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2246)
2022-08-18 00:00:00
cve
cve
CVE-2022-1354
2022-08-31 16:15:09
redhatcve
redhatcve
CVE-2022-1354
2022-04-14 12:31:31
debiancve
debiancve
CVE-2022-1354
2022-08-31 16:15:09
cvelist
cvelist
CVE-2022-1354
2022-08-31 00:00:00
prion
prion
Heap overflow
2022-08-31 16:15:00
cnvd
cnvd
LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72098)
2022-09-05 00:00:00
nvd
nvd
CVE-2022-1354
2022-08-31 16:15:09
mageia
mageia
Updated libtiff packages fix security vulnerability
2022-06-24 23:50:43
fedora
fedora
[SECURITY] Fedora 36 Update: libtiff-4.4.0-1.fc36
2022-06-20 00:40:20
[SECURITY] Fedora 35 Update: libtiff-4.4.0-1.fc35
2022-06-22 01:25:14
cloudfoundry
cloudfoundry
USN-5619-1: LibTIFF vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
osv
osv
tiff vulnerabilities
2022-09-20 08:29:18
Moderate: libtiff security update
2022-11-15 00:00:00
tiff - security update
2023-01-20 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2022-09-20 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF
2023-05-02 20:42:17
redhat
redhat
(RHSA-2022:8194) Moderate: libtiff security update
2022-11-15 06:18:19
oraclelinux
oraclelinux
libtiff security update
2022-11-22 00:00:00
almalinux
almalinux
Moderate: libtiff security update
2022-11-15 00:00:00
gentoo
gentoo
LibTIFF: Multiple Vulnerabilities
2022-10-31 00:00:00
debian
debian
[SECURITY] [DLA 3278-1] tiff security update
2023-01-20 22:37:38
[SECURITY] [DSA 5333-1] tiff security update
2023-01-29 12:55:02

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON
Related for OSV:CVE-2022-1354
veracode1nessus22ubuntucve1openvas14cve1redhatcve1debiancve1cvelist1prion1cnvd1nvd1mageia1fedora2cloudfoundry1osv4ubuntu1ibm1redhat1oraclelinux1almalinux1gentoo1debian2