CVE-2022-2869
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-2869 tiff Corrigé dans: 4.4.0-r0
- BellSoft Alpaquita BELL-CVE-2022-2869
- Debian DEBIAN-CVE-2022-2869 tiff Corrigé dans: 4.2.0-1+deb11u3
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- report bugzilla.redhat.com
- web lists.debian.org