Summary
It was discovered that LibTIFF incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service,
or possibly execute arbitrary code. (CVE-2022-2867, CVE-2022-2869)
It was discovered that LibTIFF incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2022-2868)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | tiff | 4.0.3-7ubuntu0.11+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | tiff | 4.0.6-1ubuntu0.8+esm3 |
Vulnerabilities 3
-
Unscored —
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supp…
-
Unscored —
libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately caus…
-
Unscored —CVE-2022-2869 Public exploit
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSample…