Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35478
HistoryMay 12, 2022 - 3:58 a.m.

Denial Of Service (DoS)

2022-05-1203:58:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

0.001 Low

EPSS

Percentile

47.4%

libtiff.so is vulnerable to denial of service attacks. The vulnerability exists in the LZWDecode function the tif_lzw.c which allows a malicious user to cause denial-of-service conditions via an out-of-bounds read through a crafted tiff file.

CPENameOperatorVersion
libtiff.sole5.7.0
libtiff.sole5.7.0