Every CVE Search/ Get API key

CVE-2010-2598

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts...

4.3 MediumFix available

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Exploit likelihood

1.99%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Record
CVE-2010-2598
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Record
CVE-2010-2598
Updated
2026-11-02
EUVDEUVD-2010-2602 No score

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Record
EUVD-2010-2602
Updated
2026-11-03
GitHub AdvisoriesGHSA-x8mf-r5p2-qm59 No score

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts...

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Record
GHSA-x8mf-r5p2-qm59
Weakness
CWE-20
Updated
2026-11-02
OSV No score

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Record
CVE-2010-2598
Updated
2026-11-02
OSVDEBIAN-CVE-2010-2598 No score

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

Record
DEBIAN-CVE-2010-2598
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Debian:12
 before 3.9.4-1
3.9.4-1
tiff
Debian:13
 before 3.9.4-1
3.9.4-1
tiff
Debian:14
 before 3.9.4-1
3.9.4-1
libtiff
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
Show 5 moreShow less
Affected packages
PackageAffectedFixed
libtiff-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3
libtiff-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.5.7-34.el3
0:3.5.7-34.el3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2598 is a medium vulnerability (CVSS 4.3) in Redhat Enterprise Linux, published July 1, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in tiff 3.9.4-1.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open