Open mend-bolt-for-github[bot] opened 1 year ago
Official repository of the OpenJPEG project
Library home page: https://github.com/uclouvain/openjpeg.git
Found in HEAD commit: 3501163dd1d68645efcce586f29683574a46c95f
Found in base branch: master
/openjpeg-2.3.0/openjpeg-2.3.0/thirdparty/libtiff/tif_dirinfo.c
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.
Publish Date: 2022-07-29
URL: CVE-2022-34526
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Step up your Open Source Security Game with Mend here
CVE-2022-34526 - Medium Severity Vulnerability
Official repository of the OpenJPEG project
Library home page: https://github.com/uclouvain/openjpeg.git
Found in HEAD commit: 3501163dd1d68645efcce586f29683574a46c95f
Found in base branch: master
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.
Publish Date: 2022-07-29
URL: CVE-2022-34526
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Step up your Open Source Security Game with Mend here