CVE-2022-2868

5.5

MEDIUMCVSS v3

Published

August 17, 2022

Affected

9 projects

Assigned by

Red Hat

Severity scale

010

Description

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.

libtiff/libtiff

GitLabTIFF Library and Utilities

< 4.4.0NVD

rzkn/libtiff

GitLab

< 4.4.0NVD

vadz/libtiff

GitHubOBSOLETE and not updated any more libtiff mirror, see website for the new one

More on this CVE

NVD↗GitHub Advisory↗

< 4.4.0NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

< 4.4.0NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 35, = 36NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 35, = 36NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 35, = 36NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 35, = 36NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 35, = 36NVD

Security Advisories

CVE-2022-2868

Description

More on this CVE