CVE-2022-0908

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lea...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2022-0908 tiff Corrigé dans: 4.3.0-r0
BellSoft Alpaquita BELL-CVE-2022-0908
Debian DEBIAN-CVE-2022-0908 tiff Corrigé dans: 4.2.0-1+deb11u1

Références

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
advisory security.gentoo.org
advisory security.netapp.com
advisory debian.org
patch gitlab.com
report gitlab.com
web gitlab.com