CVE-2022-4645
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-4645 tiff Corrigé dans: 4.4.0-r2
- BellSoft Alpaquita BELL-CVE-2022-4645
- Debian DEBIAN-CVE-2022-4645 tiff Corrigé dans: 4.2.0-1+deb11u3
Références
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- patch gitlab.com
- report gitlab.com
- web gitlab.com