CVE-2022-0908

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lea...

Original description

The description as published by the source.

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2022-0908 tiff Fixed in: 4.3.0-r0
BellSoft Alpaquita BELL-CVE-2022-0908
Debian DEBIAN-CVE-2022-0908 tiff Fixed in: 4.2.0-1+deb11u1

References

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
advisory security.gentoo.org
advisory security.netapp.com
advisory debian.org
patch gitlab.com
report gitlab.com
web gitlab.com