Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop".
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-tools | May 13, 2022 | Sep 7, 2021 |
| Centos_linux | — | Upgrade libtiff-debuginfoUpgrade libtiffUpgrade libtiff-develUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsource | May 13, 2022 | Sep 7, 2021 |
| Debian | — | Upgrade tiff | Nov 29, 2021 | Sep 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libtiffUpgrade libtiff-devel | Feb 24, 2022 | Sep 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libtiffUpgrade libtiff-devel | Mar 2, 2022 | Sep 7, 2021 |
| Oracle_linux | — | Upgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff | May 18, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade libtiff-tools-debuginfoUpgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff-debugsourceUpgrade libtiffNo solution existsUpgrade libtiff-debuginfo | May 13, 2022 | Sep 7, 2021 |
| Rocky_linux | — | Upgrade libtiff-toolsUpgrade libtiff-debuginfoUpgrade libtiff-develUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff | May 20, 2022 | Sep 7, 2021 |
| Suse | — | Upgrade libtiff-devel-32bitUpgrade libtiff-develUpgrade libtiff5Upgrade tiffUpgrade libtiff5-32bit | Feb 18, 2022 | Sep 7, 2021 |
| Ubuntu | — | Upgrade libtiff5 (Ubuntu Pro)Upgrade libtiff5Upgrade libtiff-openglUpgrade libtiff-opengl (Ubuntu Pro)Upgrade libtiffxx5 (Ubuntu Pro)Upgrade libtiff-toolsUpgrade libtiffxx5Upgrade libtiff-tools (Ubuntu Pro) | Jul 20, 2022 | Sep 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub