Red Hat Security Advisory

RHSA-2024:3059

libtiff security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-31.el8, libtiff-devel-4.0.9-31.el8
Red Hat Enterprise Linux CRB (v. 8) libtiff-tools-4.0.9-31.el8

TI-2022-04245 CVE-2022-4645 · GHSA-6fr2-gj2w-xgr6

MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00425 Published 2023-03-03 Partial fix CWE-125