PT-2022-6885 · Libtiff+7 · Libtiff+7

[e-mail] · Published 2022-10-21 · Updated 2025-06-19 · CVE-2022-3597

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0

Description The issue is related to an out-of-bounds write in the TIFFmemcpy function in libtiff/tif unix.c:346 when called from extractImageSection in tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service.

Recommendations For LibTIFF version 4.4.0, users who compile libtiff from sources can apply the fix available with commit 236b7191.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2023:2340

ALT-PU-2022-3360

ALT-PU-2022-3428

ALT-PU-2025-7185

ALT-PU-2025-7532

AZL-11284

BDU:2023-05408

CVE-2022-3597

DLA-3278-1

DSA-5333-1

OESA-2022-2020

OPENSUSE-SU-2022_4259-1

OPENSUSE-SU-2024:12510-1

RHSA-2023:2340

RHSA-2023_2340

ROSA-SA-2025-2627

SUSE-SU-2022:4248-1

SUSE-SU-2022:4259-1

SUSE-SU-2022_4248-1

SUSE-SU-2022_4259-1

USN-5714-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Libtiff

Linuxmint

Red Hat

Suse

Ubuntu

References · 90

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3597.json · Exploit
• 🔥 https://github.com/xiaoqx/pocs/tree/master/libtiff · Exploit
• 🔥 https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow · Exploit
• 🔥 https://gitlab.com/libtiff/libtiff/-/issues/413 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-3597 · Security Note
• https://ubuntu.com/security/CVE-2022-3597 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3627 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2953 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3598 · Security Note
• https://ubuntu.com/security/CVE-2022-2868 · Vendor Advisory
• https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047 · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2022-3597 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2020 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3597 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2340 · Vendor Advisory