Lucene search
Veracode Vulnerability DatabaseVERACODE:39027HistoryJan 27, 2023 - 4:17 a.m.
Heap-Based Buffer Overflow
2023-01-2704:17:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
libtiff.so
heap-based buffer overflow
processcropselections
tiff image
buffer overflows
software
EPSS
0.001
Percentile
35.2%
libtiff.so is vulnerable to Heap-Based Buffer Overflow. An attacker is able to trigger buffer overflows by parsing a specially crafted TIFF image in the processCropSelections function of tools/tiffcrop.c.
References
Related
debian
debian
[SECURITY] [DLA 3297-1] tiff security update
2023-01-30 21:44:57
[SECURITY] [DSA 5333-1] tiff security update
2023-01-29 12:55:02
rocky
rocky
libtiff security update
2023-08-31 16:54:34
libtiff security update
2023-08-31 16:55:40
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0199-1)
2023-01-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0342-1)
2023-02-13 00:00:00
Debian: Security Advisory (DLA-3297-1)
2023-01-31 00:00:00
nvd
nvd
CVE-2022-48281
2023-01-23 03:15:09
nessus
nessus
RHEL 8 : libtiff (RHSA-2023:3827)
2023-06-27 00:00:00
Rocky Linux 8 : libtiff (RLSA-2023:3827)
2023-08-31 00:00:00
Photon OS 4.0: Libtiff PHSA-2023-4.0-0328
2024-07-23 00:00:00
oraclelinux
oraclelinux
libtiff security update
2023-06-29 00:00:00
libtiff security update
2023-06-21 00:00:00
debiancve
debiancve
CVE-2022-48281
2023-01-23 03:15:09
redhatcve
redhatcve
CVE-2022-48281
2023-01-24 04:36:30
osv
osv
CVE-2022-48281
2023-01-23 03:15:09
Moderate: libtiff security update
2023-08-31 16:54:34
Moderate: libtiff security update
2023-06-27 00:00:00
cnvd
cnvd
LibTIFF Buffer Overflow Vulnerability (CNVD-2023-29695)
2023-02-03 00:00:00
redhat
redhat
cbl_mariner
cbl_mariner
CVE-2022-48281 affecting package libtiff 4.4.0-6
2023-02-14 02:35:58
CVE-2022-48281 affecting package libtiff for versions less than 4.4.0-7
2023-02-24 01:54:12
almalinux
almalinux
Moderate: libtiff security update
2023-06-27 00:00:00
Moderate: libtiff security update
2023-06-21 00:00:00
mageia
mageia
Updated libtiff packages fix security vulnerability
2023-02-07 03:06:39
cve
cve
CVE-2022-48281
2023-01-23 03:15:09
ibm
ibm
cvelist
cvelist
CVE-2022-48281
2023-01-23 00:00:00
ubuntucve
ubuntucve
CVE-2022-48281
2023-01-23 00:00:00
alpinelinux
alpinelinux
CVE-2022-48281
2023-01-23 03:15:09
redos
redos
ROS-20230124-03
2023-01-24 00:00:00
prion
prion
Heap overflow
2023-01-23 03:15:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0328
2023-02-07 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0528
2023-02-08 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0018
2023-06-06 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2023-02-02 00:00:00
LibTIFF vulnerabilities
2023-08-15 00:00:00
gentoo
gentoo
LibTIFF: Multiple Vulnerabilities
2023-05-30 00:00:00
hp
hp
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00