REDHAT-BUG-2064145
First published: Tue Mar 15 2022(Updated: )
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file. <a href="https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0908.json">https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0908.json</a> <a href="https://gitlab.com/libtiff/libtiff/-/commit/a95b799f65064e4ba2e2dfc206808f86faf93e85">https://gitlab.com/libtiff/libtiff/-/commit/a95b799f65064e4ba2e2dfc206808f86faf93e85</a> <a href="https://gitlab.com/libtiff/libtiff/-/issues/383">https://gitlab.com/libtiff/libtiff/-/issues/383</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libtiff | <=4.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0908.json
- https://gitlab.com/libtiff/libtiff/-/commit/a95b799f65064e4ba2e2dfc206808f86faf93e85
- https://gitlab.com/libtiff/libtiff/-/issues/383
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2064153
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2064149
- https://access.redhat.com/errata/RHSA-2022:7585
- https://access.redhat.com/errata/RHSA-2022:8194
- https://access.redhat.com/security/cve/cve-2022-0908
- https://bugzilla.redhat.com/show_bug.cgi?id=2064145
Frequently Asked Questions
What is the severity of REDHAT-BUG-2064145?
The severity of REDHAT-BUG-2064145 is categorized as a Denial of Service vulnerability.
How do I fix REDHAT-BUG-2064145?
To fix REDHAT-BUG-2064145, update libtiff to version 4.3.0 or later.
Which versions of libtiff are affected by REDHAT-BUG-2064145?
libtiff versions prior to and including 4.3.0 are affected by REDHAT-BUG-2064145.
What could be the impact of REDHAT-BUG-2064145?
The impact of REDHAT-BUG-2064145 could lead to a Denial of Service when processing crafted TIFF files.
Where can I find more information about REDHAT-BUG-2064145?
More information about REDHAT-BUG-2064145 can be found in the Red Hat bug report.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-0908
- agent/source
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libtiff
- canonical/libtiff