Debian: DLA-3278-1 Critical: TIFF Denial Of Service Risks

CVE-2022-1354

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in
TIFFReadRawDataStriped() function. This flaw allows an attacker to
pass a crafted TIFF file to the tiffinfo tool, triggering a heap
buffer overflow issue and causing a crash that leads to a denial
of service.

CVE-2022-1355

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in
main() function. This flaw allows an attacker to pass a crafted
TIFF file to the tiffcp tool, triggering a stack buffer overflow
issue, possibly corrupting the memory, and causing a crash that
leads to a denial of service.

CVE-2022-2056, CVE-2022-2057, CVE-2022-2058

Divide By Zero error in tiffcrop allows attackers to cause a
denial-of-service via a crafted tiff file.

CVE-2022-2867, CVE-2022-2868, CVE-2022-2869

libtiff's tiffcrop utility has underflow and input validation flaw
that can lead to out of bounds read and write. An attacker who