vulnerability

Amazon Linux AMI: CVE-2020-35522: Security patch for libtiff (ALAS-2022-1625)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
03/09/2021
Added
08/05/2022
Modified
08/05/2022

Description

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.

Solution

amazon-linux-upgrade-libtiff
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.