According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.
    (CVE-2022-0865)

  - Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit f2b656e2. (CVE-2022-0907)

  - Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.
    (CVE-2022-0909)

  - Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
    (CVE-2022-0924)

  - stack-buffer-overflow in tiffcp.c in main(). (CVE-2022-1355)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in     tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF     file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
    (CVE-2022-0561)

  - Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c     in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users     that compile libtiff from sources, a fix is available with commit 561599c. (CVE-2022-0562)

  - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.
    (CVE-2022-0865)

  - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0     allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could     result into application crash, potential information disclosure or any other context-dependent impact     (CVE-2022-0891)

  - Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit f2b656e2. (CVE-2022-0907)

  - Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in     tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
    (CVE-2022-0908)

  - Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.
    (CVE-2022-0909)

  - Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
    (CVE-2022-0924)

  - LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a     custom tag and 0x0200 as the second word of the DE field. (CVE-2022-22844)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.
    (CVE-2022-0865)

  - Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause     a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is     available with commit f2b656e2. (CVE-2022-0907)

  - Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.
    (CVE-2022-0909)

  - Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
    (CVE-2022-0924)

  - stack-buffer-overflow in tiffcp.c in main(). (CVE-2022-1355)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7585 advisory.

    [4.0.9-23]
    - Fix various CVEs
    - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865       CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8194 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)

    * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)

    * libtiff: reachable assertion (CVE-2022-0865)

    * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)

    * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)

    * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)

    * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)

    * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c     (CVE-2022-0908)

    * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

    * libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8194 advisory.

    [4.4.0-2]
    - Update to version 4.4.0
    - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865       CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354       CVE-2022-1355

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtiff-4.4.0-2.el9 build changelog.

  - Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in     tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF     file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
    (CVE-2022-0561)

  - Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c     in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users     that compile libtiff from sources, a fix is available with commit 561599c. (CVE-2022-0562)

  - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.
    (CVE-2022-0865)

  - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0     allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could     result into application crash, potential information disclosure or any other context-dependent impact     (CVE-2022-0891)

  - Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in     tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
    (CVE-2022-0908)

  - Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.
    (CVE-2022-0909)

  - Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
    (CVE-2022-0924)

  - A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This     flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer     overflow issue and causing a crash that leads to a denial of service. (CVE-2022-1354)

  - A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an     attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue,     possibly corrupting the memory, and causing a crash that leads to a denial of service. (CVE-2022-1355)

  - LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a     custom tag and 0x0200 as the second word of the DE field. (CVE-2022-22844)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4563:04 advisory.

    * libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
      * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
      * libtiff: reachable assertion (CVE-2022-0865)
      * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
      * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
      * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
      * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
      * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c     (CVE-2022-0908)
      * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)
      * libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4143:03 advisory.

    * libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
      * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
      * libtiff: reachable assertion (CVE-2022-0865)
      * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
      * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
      * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
      * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
      * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c     (CVE-2022-0908)
      * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
    (CVE-2022-0924)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7585 advisory.

  - Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in     tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF     file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
    (CVE-2022-0561)

  - Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c     in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users     that compile libtiff from sources, a fix is available with commit 561599c. (CVE-2022-0562)

  - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted     tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.
    (CVE-2022-0865)

  - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0     allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could     result into application crash, potential information disclosure or any other context-dependent impact     (CVE-2022-0891)

  - Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in     tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
    (CVE-2022-0908)

  - Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.
    (CVE-2022-0909)

  - Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
    (CVE-2022-0924)

  - A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an     attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue,     possibly corrupting the memory, and causing a crash that leads to a denial of service. (CVE-2022-1355)

  - LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a     custom tag and 0x0200 as the second word of the DE field. (CVE-2022-22844)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5523-2 advisory.

    USN-5523-1 fixed several vulnerabilities in LibTIFF. This update provides the fixes for CVE-2022-0907,     CVE-2022-0908, CVE-2022-0909, CVE-2022-0924 and CVE-2022-22844 for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0252 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-0561:
      Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in     tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF     file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

      CVE-2022-0562:
      Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in     tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file.
    For users that compile libtiff from sources, a fix is available with commit 561599c.

      CVE-2022-22844:
      LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a     custom tag and 0x0200 as the second word of the DE field.

      CVE-2022-0865:
      Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.

      CVE-2022-0891:
      A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0     allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could     result into application crash, potential information disclosure or any other context-dependent impact

      CVE-2022-0924:
      Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.

      CVE-2022-0909:
      Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a     crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.

      CVE-2022-0908:
      Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in     tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

      CVE-2022-1355:
      A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an     attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue,     possibly corrupting the memory, and causing a crash that leads to a denial of service.

      CVE-2020-19131:
      Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the invertImage()     function in the component tiffcrop.

      CVE-2020-35521:
      A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can     lead to an abort, resulting in denial of service.

      CVE-2020-35522:
      In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an     abort, resulting in a remote denial of service attack.

      CVE-2020-35523:
      An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows     an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat     from this vulnerability is to confidentiality, integrity, as well as system availability.

      CVE-2020-35524:
      A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's     TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from     this vulnerability is to confidentiality, integrity, as well as system availability.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
163568	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2136)	Nessus	Huawei Local Security Checks	2022/7/29	2023/10/17	medium
163603	EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2022-2182)	Nessus	Huawei Local Security Checks	2022/7/29	2023/10/17	high
163136	EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2091)	Nessus	Huawei Local Security Checks	2022/7/14	2023/10/18	medium
167589	Oracle Linux 8 : libtiff (ELSA-2022-7585)	Nessus	Oracle Linux Local Security Checks	2022/11/16	2024/11/1	high
167604	RHEL 9 : libtiff (RHSA-2022:8194)	Nessus	Red Hat Local Security Checks	2022/11/16	2025/3/16	high
168086	Oracle Linux 9 : libtiff (ELSA-2022-8194)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/11/1	high
191155	CentOS 9 : libtiff-4.4.0-2.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
293422	MiracleLinux 9 : libtiff-4.4.0-2.el9 (AXSA:2022-4563:04)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
292487	MiracleLinux 8 : libtiff-4.0.9-23.el8 (AXSA:2022-4143:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
162360	EulerOS 2.0 SP5 : compat-libtiff3 (EulerOS-SA-2022-1884)	Nessus	Huawei Local Security Checks	2022/6/17	2023/10/20	medium
167300	AlmaLinux 8 : libtiff (ALSA-2022:7585)	Nessus	Alma Linux Local Security Checks	2022/11/12	2023/10/4	high
164944	Ubuntu 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-5523-2)	Nessus	Ubuntu Local Security Checks	2022/9/12	2024/8/29	medium
276330	TencentOS Server 3: libtiff (TSSA-2022:0252)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high

检测

插件搜索

medium

high

medium

high

high

high

high

high

high

medium

high

medium

high