CVE-2022-3570

Katalog CVE

CVSS 5.5 · Medium EPSS 0,51%

Kerentanan Out-of-bounds Write pada libtiff, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

Rincian

Terbit di NVD

21 Oktober 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 41,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094c patch
• https://gitlab.com/libtiff/libtiff/-/issues/381 exploit · issue tracking · patch · advisory pihak ketiga
• https://gitlab.com/libtiff/libtiff/-/issues/386 exploit · issue tracking · patch · advisory pihak ketiga
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.json advisory pihak ketiga · vdb entry
• https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230203-0002/ advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5333 advisory pihak ketiga