The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0095 advisory.

  - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
    (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

  - There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1     (CVE-2022-2519)

  - A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input. (CVE-2022-2520)

  - It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input. (CVE-2022-2521)

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-067 advisory.

    There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1.
    (CVE-2022-2519)

    A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input. (CVE-2022-2520)

    It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input. (CVE-2022-2521)

    libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

    LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0095 advisory.

  - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
    (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

  - There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1     (CVE-2022-2519)

  - A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input. (CVE-2022-2520)

  - It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input. (CVE-2022-2521)

  - libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An     attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with     certain parameters) could cause a crash or in some cases, further exploitation. (CVE-2022-2867)

  - libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and     ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. (CVE-2022-2868)

  - libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the     extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this     flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw     could cause a crash or potentially further exploitation. (CVE-2022-2869)

  - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing     attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from     sources, the fix is available with commit 48d6ece8. (CVE-2022-2953)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4774:01 advisory.

    * LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
      * libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
      * libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)
      * libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in     extractContigSamples8bits() (CVE-2022-2869)
      * libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
      * libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
      * libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)
      * libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in     reverseSamples16bits() (CVE-2022-2868)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0094 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-3627:
      An out-of-bounds write flaw was found in the _TIFFmemcpy function in libtiff/tif_unix.c in the libtiff     package. By persuading a victim to open a specially-crafted TIFF image file, a remote attacker could cause     a denial of service condition.
      CVE-2022-3970:
      An integer overflow flaw was found in LibTIFF. This issue exists in the TIFFReadRGBATileExt function of     the libtiff/tif_getimage.c file, and may lead to a buffer overflow.
      CVE-2022-2519:
      A double-free flaw was found in the tiffcrop tool distributed with the libtiff tools package. The     double-free issue leads to a denial of service, impacting the availability.
      CVE-2022-2520:
      A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at     tiffcrop.c:8621 that can cause program crash when reading a crafted input.
      CVE-2022-2521:
      It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at     tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while     processing crafted input.
      CVE-2022-2953:
      An out-of-bound read flaw was found in LibTIFF, in extractImageSection in the tools/tiffcrop.c:6905,     allowing attackers to cause a denial of service via a crafted tiff file.
      CVE-2022-2057:
      A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of     service via a crafted tiff file.
      CVE-2022-2058:
      A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of     service via a crafted tiff file.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
170032	AlmaLinux 8 : libtiff (ALSA-2023:0095)	Nessus	Alma Linux Local Security Checks	2023/1/13	2023/9/7	medium
173112	Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-067)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	medium
190181	CentOS 8 : libtiff (CESA-2023:0095)	Nessus	CentOS Local Security Checks	2024/2/8	2024/2/8	medium
291906	MiracleLinux 8 : libtiff-4.0.9-26.el8 (AXSA:2023-4774:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
239353	TencentOS Server 3: libtiff (TSSA-2023:0094)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high

検出

プラグインの検索

medium

medium

medium

medium

high