CVE:CVE-2022-34526
CNNVD:CNNVD-202207-2797
Tiffsplit是一个程序，可将多图像 TIFF 拆分为单图像 TIFF 文件。
Tiffsplit v4.4.0版本存在缓冲区错误漏洞，该漏洞源于TIFFVGetField 函数中存在堆栈溢出，攻击者利用该漏洞可以通过特制的 TIFF 文件造成服务拒绝。
solution:Upgrade libtiff libtiff to a higher version than 4.4.0,and avoid the version 4.4.0; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0