CVE-2022-0908

7.7

HIGHCVSS v3

Published

March 11, 2022

CVSS v2

4.3 MEDIUM

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

libtiff/libtiff

GitLabTIFF Library and Utilities

<= 4.3.0NVD

rzkn/libtiff

GitLab

<= 4.3.0NVD

vadz/libtiff

GitHub

More on this CVE

NVD↗GitHub Advisory↗

OBSOLETE and not updated any more libtiff mirror, see website for the new one

<= 4.3.0NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

<= 4.3.0NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 35, = 36NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 35, = 36NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 35, = 36NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 35, = 36NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 35, = 36NVD

Security Advisories

CVE-2022-0908

Description

More on this CVE