CVE-2022-0908
Name
CVE-2022-0908
Description
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
NVD Severity
medium
Other trackers
CVE
,
NVD
,
CERT
,
CVE Details
,
CIRCL
,
Arch Linux
,
Debian
,
Red Hat
,
Ubuntu
,
Gentoo
,
SUSE (Bugzilla)
,
SUSE (CVE)
,
Mageia
Mailing lists
oss-security
,
full-disclosure
,
bugtraq
Exploits
Exploit DB
,
Metasploit
Forges
GitHub (
code
,
issues
), Aports (
code
,
issues
)
References
Type
URI
CONFIRM
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0908.json
MISC
https://gitlab.com/libtiff/libtiff/-/commit/a95b799f65064e4ba2e2dfc206808f86faf93e85
MISC
https://gitlab.com/libtiff/libtiff/-/issues/383
Third Party Advisory
https://www.debian.org/security/2022/dsa-5108
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0002/
Third Party Advisory
https://security.gentoo.org/glsa/202210-10
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/
Match rules
CPE URI
Source package
Min version
Max version
cpe:2.3:a:libtiff:libtiff:4.3.0:*:*:*:*:*:*:*
libtiff
== None
== 4.3.0
Vulnerable and fixed packages
Source package
Branch
Version
Maintainer
Status