CVE-2022-1623
MediumPublic PoC
Published: 11 May 2022
Published
11 May 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.0033
56.5th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-1623 is a medium-severity Out-of-bounds Read (CWE-125) vulnerability in Fedoraproject Fedora. Its CVSS base score is 5.5 (Medium).
Operationally, ranked in the top 43.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-24912
Vulnerability details
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
libtiff
libtiff
4.3.0
fedoraproject
fedora
35, 36
netapp
ontap select deploy administration utility
all versions
debian
debian linux
11.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.