Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-35522

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.

VectorLOCAL

PublishedMar 09, 2021, 20:15

Published Bysecalert@redhat.com

Base Score

Score5.5

Affected Versions

No affected versions found.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1932037
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMHBYFMX3D5VGR6Y3RXTTH3Q4NF4E6IG/
https://security.gentoo.org/glsa/202104-06
https://security.netapp.com/advisory/ntap-20210521-0009/

Weakness Type

CWE-119

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL