CVE-2022-2953
Summary
| CVE | CVE-2022-2953 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-08-29 15:15:00 UTC |
|---|
| Updated | 2023-02-23 16:01:00 UTC |
|---|
| Description | LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| CVE-2022-2953 LibTIFF Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| tiffcrop: heap-buffer-overflow in extractImageSection, tiffcrop.c:6905 (#414) · Issues · libtiff / libtiff · GitLab |
MISC |
gitlab.com |
|
| Debian -- Security Information -- DSA-5333-1 tiff |
DEBIAN |
www.debian.org |
|
| 2022/CVE-2022-2953.json · master · GitLab.org / cves · GitLab |
CONFIRM |
gitlab.com |
|
| Merge branch 'tiffcrop_S-option_mutually_exclusive' into 'master' (48d6ece8) · Commits · libtiff / libtiff · GitLab |
MISC |
gitlab.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
Legacy QID Mappings
- 160390 Oracle Enterprise Linux Security Update for libtiff (ELSA-2023-0095)
- 160411 Oracle Enterprise Linux Security Update for libtiff (ELSA-2023-0302)
- 181520 Debian Security Update for tiff (DSA 5333-1)
- 182841 Debian Security Update for tiff (CVE-2022-2953)
- 199019 Ubuntu Security Notification for LibTIFF Vulnerabilities (USN-5714-1)
- 241054 Red Hat Update for libtiff (RHSA-2023:0095)
- 241120 Red Hat Update for libtiff (RHSA-2023:0302)
- 355148 Amazon Linux Security Advisory for libtiff : ALAS2023-2023-067
- 502794 Alpine Linux Security Update for tiff
- 503132 Alpine Linux Security Update for tiff
- 505945 Alpine Linux Security Update for tiff
- 672346 EulerOS Security Update for libtiff (EulerOS-SA-2022-2770)
- 672388 EulerOS Security Update for libtiff (EulerOS-SA-2022-2735)
- 672404 EulerOS Security Update for libtiff (EulerOS-SA-2022-2799)
- 672462 EulerOS Security Update for libtiff (EulerOS-SA-2022-2850)
- 672464 EulerOS Security Update for libtiff (EulerOS-SA-2022-2825)
- 672772 EulerOS Security Update for libtiff (EulerOS-SA-2023-1509)
- 672775 EulerOS Security Update for compat-libtiff3 (EulerOS-SA-2023-1494)
- 903774 Common Base Linux Mariner (CBL-Mariner) Security Update for libtiff (10779)
- 903887 Common Base Linux Mariner (CBL-Mariner) Security Update for libtiff (10762)
- 904120 Common Base Linux Mariner (CBL-Mariner) Security Update for libtiff (10762-1)
- 904179 Common Base Linux Mariner (CBL-Mariner) Security Update for libtiff (10779-1)
- 940871 AlmaLinux Security Update for libtiff (ALSA-2023:0095)
- 940898 AlmaLinux Security Update for libtiff (ALSA-2023:0302)
- 960525 Rocky Linux Security Update for libtiff (RLSA-2023:0302)
- 960537 Rocky Linux Security Update for libtiff (RLSA-2023:0095)
