REDHAT-BUG-2064145: Low severity tiff vulnerability
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tifdirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0908.json https://gitlab.com/libtiff/libtiff/-/commit/a95b799f65064e4ba2e2dfc206808f86faf93e85 https://gitlab.com/libtiff/libtiff/-/issues/383
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2064145?
The severity of REDHAT-BUG-2064145 is categorized as a Denial of Service vulnerability.
How do I fix REDHAT-BUG-2064145?
To fix REDHAT-BUG-2064145, update libtiff to version 4.3.0 or later.
Which versions of libtiff are affected by REDHAT-BUG-2064145?
libtiff versions prior to and including 4.3.0 are affected by REDHAT-BUG-2064145.
What could be the impact of REDHAT-BUG-2064145?
The impact of REDHAT-BUG-2064145 could lead to a Denial of Service when processing crafted TIFF files.
Where can I find more information about REDHAT-BUG-2064145?
More information about REDHAT-BUG-2064145 can be found in the Red Hat bug report.