Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2020-35522 PUBLISHED CVSS 5.5 MEDIUM

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.17tiff4.0.7-r2, 4.1.0-r2, 4.1.0-r1
Alpine:v3.18tiff4.1.0-r1, 0, 3.8.2-r0
Alpine:v3.16tiff4.0.3-r0, 3.8.2-r0, 3.8.2-r2
Alpine:v3.14tiff3.8.2-r2, 0, 3.8.2-r1
Alpine:v3.23tiff3.8.2-r1, 3.8.2-r2, 3.8.2-r4
Alpine:v3.21tiff4.0.9-r2, 0, 3.8.2-r0
Alpine:v3.20tiff0, 4.1.0-r2, 4.1.0-r1
Alpine:v3.13tiff3.8.2-r0, 4.1.0-r2, 4.1.0-r1
Alpine:v3.22tiff0, 3.8.2-r0, 3.8.2-r1
Alpine:v3.15tiff0, 3.8.2-r0, 4.1.0-r2
Alpine:v3.19tiff0, 4.1.0-r2, 4.1.0-r1

Timeline

References

Open in Interactive Console →