CVE-2020-35521

Public on 2021-03-09

Modified on 2022-08-05

Description

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.

Severity

Low

See what this means

CVSS v3 Base Score

5.5

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	libtiff	2022-07-28 20:38	ALAS-2022-1625
Amazon Linux 2 - Core	libtiff	2022-04-25 22:56	ALAS2-2022-1780

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD	CVSSv2	4.3	AV:N/AC:M/Au:N/C:N/I:N/A:P
NVD	CVSSv3	5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

Red Hat: CVE-2020-35521 Mitre: CVE-2020-35521 FAQs regarding Amazon Linux ALAS/CVE Severity