In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libtiffalma-upgrade-libtiff-develalma-upgrade-libtiff-tools | May 4, 2022 | Mar 9, 2021 | |
| Alpine Linux | alpine-linux-upgrade-tiff | Aug 22, 2024 | Mar 9, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libtiffamazon-linux-ami-2-upgrade-libtiff-debuginfoamazon-linux-ami-2-upgrade-libtiff-develamazon-linux-ami-2-upgrade-libtiff-staticamazon-linux-ami-2-upgrade-libtiff-tools | Jul 4, 2022 | Mar 9, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-libtiff | Aug 5, 2022 | Mar 9, 2021 |
| Centos_linux | — | centos-upgrade-libtiffcentos-upgrade-libtiff-debuginfocentos-upgrade-libtiff-debugsourcecentos-upgrade-libtiff-develcentos-upgrade-libtiff-tools-debuginfo | Nov 10, 2021 | Mar 9, 2021 |
| Debian | debian-upgrade-tiff | Jul 30, 2024 | Mar 9, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-tiff | May 3, 2021 | Mar 9, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libtiffhuawei-euleros-2_0_sp8-upgrade-libtiff-devel | May 18, 2021 | Mar 9, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libtiff | Jun 2, 2021 | Mar 9, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-image-library-libtiff-4-2-0-11-4-33-0-1-94-0 | May 19, 2021 | Mar 9, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-libtifforacle-linux-upgrade-libtiff-develoracle-linux-upgrade-libtiff-tools | Nov 17, 2021 | Dec 14, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libtiffredhat-upgrade-libtiff-debuginforedhat-upgrade-libtiff-debugsourceredhat-upgrade-libtiff-develredhat-upgrade-libtiff-toolsredhat-upgrade-libtiff-tools-debuginfo | Nov 10, 2021 | Mar 9, 2021 | |
| Rocky_linux | rocky-upgrade-libtiffrocky-upgrade-libtiff-debuginforocky-upgrade-libtiff-debugsourcerocky-upgrade-libtiff-develrocky-upgrade-libtiff-toolsrocky-upgrade-libtiff-tools-debuginfo | Mar 12, 2024 | Mar 9, 2021 | |
| Suse | — | suse-upgrade-libtiff-develsuse-upgrade-libtiff-devel-32bitsuse-upgrade-libtiff3suse-upgrade-libtiff3-32bitsuse-upgrade-libtiff5suse-upgrade-libtiff5-32bitsuse-upgrade-tiff | Feb 18, 2022 | Mar 9, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libtiff-toolsubuntu-pro-upgrade-libtiff5ubuntu-upgrade-libtiff-toolsubuntu-upgrade-libtiff5 | May 16, 2022 | Mar 9, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub