PT-2022-4805 · Libtiff+9 · Libtiff+9

Chintan Shah + 1 · Published 2022-02-11 · Updated 2025-06-03 · CVE-2022-0561

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libtiff versions 3.9.0 through 4.3.0

Description The issue is related to a null source pointer being passed as an argument to the memcpy() function within the TIFFFetchStripThing() function in tif dirread.c in libtiff. This could lead to a Denial of Service via a crafted TIFF file. A remote attacker could exploit this issue to cause a denial of service.

Recommendations For libtiff versions 3.9.0 through 4.3.0, users who compile libtiff from sources can apply the fix available with commit eecb0712. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2022:7585

ALSA-2022:8194

ALSA-2022_7585

ALSA-2022_8194

ALT-PU-2022-2007

ALT-PU-2022-3428

ALT-PU-2025-7532

AZL-44223

AZL-8527

BDU:2022-05790

CESA-2022_7585

CVE-2022-0561

DLA-2932-1

DSA-5108-1

MGASA-2022-0087

OESA-2022-1551

OESA-2022-2067

OPENSUSE-SU-2022_1882-1

OPENSUSE-SU-2022_3690-1

OPENSUSE-SU-2024:12057-1

RHSA-2022:7585

RHSA-2022:8194

RHSA-2022_7585

RHSA-2022_8194

RLSA-2022:7585

SUSE-SU-2022:1667-1

SUSE-SU-2022:1882-1

SUSE-SU-2022:3679-1

SUSE-SU-2022:3690-1

SUSE-SU-2022_1667-1

SUSE-SU-2022_1882-1

SUSE-SU-2022_3679-1

SUSE-SU-2022_3690-1

USN-5421-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Libtiff

References · 134

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0561.json · Exploit
• 🔥 https://github.com/xiaoqx/pocs/tree/master/libtiff · Exploit
• 🔥 https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow · Exploit
• 🔥 https://gitlab.com/libtiff/libtiff/-/issues/362 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0561 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-0561 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0087.html · Security Note
• https://osv.dev/vulnerability/AZL-44223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0561 · Vendor Advisory
• https://debian.org/security/2022/dsa-5108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0891 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-0561 · Security Note
• https://errata.rockylinux.org/RLSA-2022:7585 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• https://security.gentoo.org/glsa/202210-10 · Vendor Advisory