CVE-2022-2521
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-2521 tiff Corrigé dans: 4.4.0-r3
- BellSoft Alpaquita BELL-CVE-2022-2521
- Debian DEBIAN-CVE-2022-2521 tiff Corrigé dans: 4.2.0-1+deb11u3
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- patch gitlab.com
- report gitlab.com