Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-0561

Good to know:

icon

Date: February 10, 2022

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

Language: C

Severity Score

Related Resources (15)

https://security.alpinelinux.org/vuln/CVE-2022-0561
https://people.canonical.com/~ubuntu-security/cve/CVE-2022-0561
https://lists.debian.org/debian-lts-announce/2022/03/msg00001.html
https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/eecb0712f4c3a5b449f70c57988260a667ddbdef
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZEHZ35XVO2VBZ4HHCMM6J6TQIDSBQOM/
https://nvd.nist.gov/vuln/detail/CVE-2022-0561
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0561.json
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZEHZ35XVO2VBZ4HHCMM6J6TQIDSBQOM/
https://www.debian.org/security/2022/dsa-5108
https://security-tracker.debian.org/tracker/CVE-2022-0561
https://security.gentoo.org/glsa/202210-10
https://gitlab.com/libtiff/libtiff/-/issues/362
https://access.redhat.com/security/cve/CVE-2022-0561
https://security.netapp.com/advisory/ntap-20220318-0001/
https://www.mend.io/vulnerability-database/CVE-2022-0561

Severity Score

Weakness Type (CWE)

NULL Pointer Dereference

CWE-476

Top Fix

icon

Upgrade Version

Upgrade to version libtiff - 4.4.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us