ZeroHour

CVE-2022-0924

PoC
CVSS 3.1
5.5 medium
EPSS
1%p70
Published
()
Modified
Description

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.

Vendors
libtiffdebianfedoraprojectnetapp
Products
libtiff, debian linux, fedora, ontap select deploy administration utility
Weakness
CWE-125
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.