REDHAT-BUG-2103222: Divide by Zero

Published Jul 1, 2022

Updated

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2058.json https://gitlab.com/libtiff/libtiff/-/mergerequests/346 https://gitlab.com/libtiff/libtiff/-/issues/428

Affected Software

1 affected component

LibTIFF libtiff

Event History

Jul 1, 2022

Data Sourced

via Red Hat·05:11 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker needs to provide a crafted TIFF file that is processed by tiffcrop in libtiff 4.4.0.

What is the impact of successful exploitation?

Successful exploitation causes a divide-by-zero error that can result in a denial of service.

What can source-build users do if they need the fix?

Users who compile libtiff from source can apply commit f3a5e010.

REDHAT-BUG-2103222: Divide by Zero

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

What can source-build users do if they need the fix?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

What can source-build users do if they need the fix?