Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop".
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-devel | May 13, 2022 | Sep 7, 2021 |
| Centos_linux | — | Upgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-debuginfo | May 13, 2022 | Sep 7, 2021 |
| Debian | — | Upgrade tiff | Nov 29, 2021 | Sep 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libtiff-develUpgrade libtiff | Feb 24, 2022 | Sep 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libtiff-develUpgrade libtiff | Mar 2, 2022 | Sep 7, 2021 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff | May 18, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade libtiff-debuginfoNo solution existsUpgrade libtiffUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-toolsUpgrade libtiff-devel | May 13, 2022 | Sep 7, 2021 |
| Rocky_linux | — | Upgrade libtiff-tools-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-debuginfo | May 20, 2022 | Sep 7, 2021 |
| Suse | — | Upgrade libtiff5-32bitUpgrade tiffUpgrade libtiff-develUpgrade libtiff-devel-32bitUpgrade libtiff5 | Feb 18, 2022 | Sep 7, 2021 |
| Ubuntu | — | Upgrade libtiff-tools (Ubuntu Pro)Upgrade libtiffxx5Upgrade libtiffxx5 (Ubuntu Pro)Upgrade libtiff-openglUpgrade libtiff5Upgrade libtiff-toolsUpgrade libtiff-opengl (Ubuntu Pro)Upgrade libtiff5 (Ubuntu Pro) | Jul 20, 2022 | Sep 7, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub