OESA-2022-2108

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2108

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2022-2108.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2022-2108

Upstream

CVE-2022-3970

Published

2022-11-22T11:05:25Z

Modified

2026-08-18T01:15:22Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

libtiff security update

Details

This package contains the header files and documentation necessary for developing programs which will manipulate TIFF format image files using the libtiff library.

Security Fix(es):

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.(CVE-2022-3970)

Database specific

{
    "severity": "Critical"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / libtiff

Package

Name: libtiff
Purl: pkg:rpm/openEuler/libtiff&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.0-7.oe1

Ecosystem specific

{
    "aarch64": [
        "libtiff-devel-4.3.0-7.oe1.aarch64.rpm",
        "libtiff-4.3.0-7.oe1.aarch64.rpm",
        "libtiff-debuginfo-4.3.0-7.oe1.aarch64.rpm",
        "libtiff-debugsource-4.3.0-7.oe1.aarch64.rpm"
    ],
    "noarch": [
        "libtiff-help-4.3.0-7.oe1.noarch.rpm"
    ],
    "src": [
        "libtiff-4.3.0-7.oe1.src.rpm"
    ],
    "x86_64": [
        "libtiff-debugsource-4.3.0-7.oe1.x86_64.rpm",
        "libtiff-4.3.0-7.oe1.x86_64.rpm",
        "libtiff-debuginfo-4.3.0-7.oe1.x86_64.rpm",
        "libtiff-devel-4.3.0-7.oe1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2022-2108.json"

openEuler:20.03-LTS-SP3 / libtiff

Package

Name: libtiff
Purl: pkg:rpm/openEuler/libtiff&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.0-7.oe1

Ecosystem specific

{
    "aarch64": [
        "libtiff-debugsource-4.3.0-7.oe1.aarch64.rpm",
        "libtiff-4.3.0-7.oe1.aarch64.rpm",
        "libtiff-devel-4.3.0-7.oe1.aarch64.rpm",
        "libtiff-debuginfo-4.3.0-7.oe1.aarch64.rpm"
    ],
    "noarch": [
        "libtiff-help-4.3.0-7.oe1.noarch.rpm"
    ],
    "src": [
        "libtiff-4.3.0-7.oe1.src.rpm"
    ],
    "x86_64": [
        "libtiff-debugsource-4.3.0-7.oe1.x86_64.rpm",
        "libtiff-debuginfo-4.3.0-7.oe1.x86_64.rpm",
        "libtiff-4.3.0-7.oe1.x86_64.rpm",
        "libtiff-devel-4.3.0-7.oe1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2022-2108.json"

openEuler:22.03-LTS / libtiff

Package

Name: libtiff
Purl: pkg:rpm/openEuler/libtiff&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.0-21.oe2203

Ecosystem specific

{
    "aarch64": [
        "libtiff-debugsource-4.3.0-21.oe2203.aarch64.rpm",
        "libtiff-debuginfo-4.3.0-21.oe2203.aarch64.rpm",
        "libtiff-devel-4.3.0-21.oe2203.aarch64.rpm",
        "libtiff-4.3.0-21.oe2203.aarch64.rpm",
        "libtiff-tools-4.3.0-21.oe2203.aarch64.rpm",
        "libtiff-static-4.3.0-21.oe2203.aarch64.rpm"
    ],
    "noarch": [
        "libtiff-help-4.3.0-21.oe2203.noarch.rpm"
    ],
    "src": [
        "libtiff-4.3.0-21.oe2203.src.rpm"
    ],
    "x86_64": [
        "libtiff-debugsource-4.3.0-21.oe2203.x86_64.rpm",
        "libtiff-debuginfo-4.3.0-21.oe2203.x86_64.rpm",
        "libtiff-4.3.0-21.oe2203.x86_64.rpm",
        "libtiff-static-4.3.0-21.oe2203.x86_64.rpm",
        "libtiff-devel-4.3.0-21.oe2203.x86_64.rpm",
        "libtiff-tools-4.3.0-21.oe2203.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2022-2108.json"