CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access...

Original description

The description as published by the source.

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2022-3570 tiff Fixed in: 4.4.0-r2
BellSoft Alpaquita BELL-CVE-2022-3570
Debian DEBIAN-CVE-2022-3570 tiff Fixed in: 4.2.0-1+deb11u3

References

advisory github.com
advisory nvd.nist.gov
advisory security.netapp.com
advisory debian.org
patch gitlab.com
report gitlab.com
report gitlab.com
web gitlab.com
web lists.debian.org