4Ugustus

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.4.0 **Description** The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in tools/tiffcrop.c:3502. This can be exploited to cause a denial-of-service via a crafted tiff file. **Recommendations** For version 4.4.0, the fix is available with commit 33aee127 for users that compile libtiff from sources.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.4.0 **Description** The issue is related to an out-of-bounds read in the `tiffcp` utility, located in `tools/tiffcp.c:948`, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can lead to a disruption in service. **Recommendations** For LibTIFF version 4.4.0, users who compile libtiff from sources can apply the fix available with commit e8131125 to resolve the issue. As a temporary workaround, consider restricting the use of the `tiffcp` utility until the fix is applied.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.4.0 **Description** The issue is related to an out-of-bounds read in the `writeSingleSection` function of the LibTIFF library, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. **Recommendations** For version 4.4.0, users who compile libtiff from sources can apply the fix available with commit e8131125.

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.4.0 **Description** The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can be achieved by a remote attacker. **Recommendations** For libtiff version 4.4.0, users who compile libtiff from sources can apply the fix available with commit f3a5e010.

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.4.0 **Description** The issue is related to a Divide By Zero error in the `tiffcrop` function of the LibTIFF library. This error can be exploited by a remote attacker to cause a denial-of-service using a specially crafted tiff file. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** For libtiff version 4.4.0, users who compile libtiff from sources can apply the fix available with commit f3a5e010. As a temporary workaround, consider restricting the use of the `tiffcrop` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.4.0 **Description** The issue is related to an out-of-bounds write in the ` TIFFmemcpy` function, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be triggered when ` TIFFmemcpy` is called from `extractImageSection` in `tools/tiffcrop.c:6860`. The vulnerability may allow a remote attacker to cause a denial-of-service. **Recommendations** For LibTIFF version 4.4.0, users who compile libtiff from sources can apply the fix available with commit 236b7191.

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.3.0 **Description** The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service. **Recommendations** For libtiff version 4.3.0, the fix is available with commit f8d0f9aa for users who compile libtiff from sources.

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.3.0 **Description** The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial-of-service using a specially crafted tiff file. This can be achieved through the `tiffcrop` function in libtiff. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For libtiff version 4.3.0, users who compile libtiff from sources can apply the fix available with commit f2b656e2 to resolve the issue. As a temporary workaround, consider disabling the `tiffcrop` function in libtiff until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.3.0 **Description** The issue is related to an out-of-bounds read error in the tiffcp component of libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service. **Recommendations** For version 4.3.0, users who compile libtiff from sources can apply the fix available with commit 408976c4.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.3.0 **Description** The issue is related to an out-of-bounds read in the ` TIFFmemcpy` function in `tif unix.c`, which can occur under certain conditions involving a custom tag and `0x0200` as the second word of the DE field. This can potentially allow a remote attacker to cause a denial of service. **Recommendations** For LibTIFF version 4.3.0, consider disabling the ` TIFFmemcpy` function in `tif unix.c` as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.