A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| enterprise linux | 8 | — | |
| enterprise linux | 9 | — | |
| libtiff | libtiff | 3.5.1 – ≤ 4.6.0 | |
| redhat | enterprise linux | 8.0 | |
| redhat | enterprise linux for arm 64 | 9.2 | |
| redhat | enterprise linux for power little endian eus | 9.2 | |
| redhat | enterprise linux server aus | 9.2 | |
| Red Hat | Red Hat Enterprise Linux 10 | — | |
| Red Hat | Red Hat Enterprise Linux 6 | — | |
| Red Hat | Red Hat Enterprise Linux 7 | — | |
| Red Hat | Red Hat Enterprise Linux 8 | all versions | |
| Red Hat | Red Hat Enterprise Linux 9 | all versions | |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | all versions | |
| rhel eus | 9.2 | — | |
| — | libtiff | fixed 4.4.0, fixed 4.0.9 |
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* ≥ 3.5.1 ≤ 4.6.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.