MGASA-2022-0119

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2022-0119.html
Import Source
https://advisories.mageia.org/MGASA-2022-0119.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2022-0119
Related
Published
2022-03-28T16:23:37Z
Modified
2022-03-28T15:41:07Z
Summary
Updated libtiff packages fix security vulnerability
Details

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-0865)

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact. (CVE-2022-0891)

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file. (CVE-2022-0908)

Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-0909)

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-0924)

References
Credits

Affected packages