PT-2022-4798 · Libtiff+9 · Libtiff+9

Chintan Shah + 1 · Published 2022-02-11 · Updated 2025-09-30 · CVE-2022-0562

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libtiff versions 4.0 through 4.3.0

Description The issue is related to errors in pointer dereferencing in the TIFFReadDirectory() function of the LibTIFF library, specifically in the tif dirread.c component. This can be exploited by a remote attacker using a specially crafted TIFF file, potentially leading to a denial of service. The vulnerability is caused by a null source pointer being passed as an argument to the memcpy() function within TIFFReadDirectory().

Recommendations For libtiff versions 4.0 through 4.3.0, apply the fix available with commit 561599c for users compiling libtiff from sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2022:7585

ALSA-2022:8194

ALT-PU-2022-2007

ALT-PU-2022-3428

ALT-PU-2025-7532

AZL-44088

AZL-8529

BDU:2022-05758

CESA-2022_7585

CVE-2022-0562

DLA-2932-1

DSA-5108-1

MGASA-2022-0087

OESA-2022-1551

OESA-2022-2067

OPENSUSE-SU-2022_1882-1

OPENSUSE-SU-2024:12057-1

RHSA-2022:7585

RHSA-2022:8194

RHSA-2022_7585

RHSA-2022_8194

RLSA-2022:7585

SUSE-SU-2022:1667-1

SUSE-SU-2022:1882-1

SUSE-SU-2022_1667-1

USN-5421-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Libtiff

References · 117

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0562.json · Exploit
• 🔥 https://github.com/xiaoqx/pocs/tree/master/libtiff · Exploit
• 🔥 https://gitlab.com/libtiff/libtiff/-/issues/362 · Exploit
• 🔥 https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0562 · Security Note
• https://errata.almalinux.org/8/ALSA-2022-7585.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0087.html · Security Note
• https://osv.dev/vulnerability/USN-5421-1 · Vendor Advisory
• https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff/-/commit/561599c99f987dc32ae110370cfdd7df7975586b · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:12057-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0561 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-8529 · Vendor Advisory
• https://debian.org/security/2022/dsa-5108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0891 · Security Note
• https://linux.oracle.com/errata/ELSA-2022-8194.html · Vendor Advisory