Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44223.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-44223
Upstream
Published
2022-02-11T18:15:11Z
Modified
2026-04-01T05:15:30.715272Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
CVE-2022-0561 affecting package openjpeg2 2.3.1-12
Details

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

References

Affected packages

Azure Linux:3 / openjpeg2

Package

Name
openjpeg2
Purl
pkg:rpm/azure-linux/openjpeg2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
2.3.1-12

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44223.json"