CVE-2022-0909 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Denial of service |
| Description | A division by zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2659 | lib32-libtiff | 4.3.0-1 | 4.3.0-2 | High | Fixed | FS#74229 |
| AVG-2658 | libtiff | 4.3.0-1 | 4.3.0-2 | High | Fixed | FS#74229 |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 05 Apr 2022 | ASA-202204-6 | AVG-2658 | libtiff | High | multiple issues |
| References |
|---|
https://gitlab.com/libtiff/libtiff/-/issues/393 https://gitlab.com/libtiff/libtiff/-/merge_requests/310 https://gitlab.com/libtiff/libtiff/-/commit/32ea0722ee68f503b7a3f9b2d557acb293fc8cde |