Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: MGASA-2022-0267 Critical: libtiff Denial-of-Service

mageia
Calendar Grey July 25, 2022
Dist Mageia Esm H88
Zero Division error present in libtiff version 4.4.0 enables Denial-of-Service via specially designed tiff documents. Countermeasures found in MGASA-2022-0267.
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file

Summary

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

References

- https://bugs.mageia.org/show_bug.cgi?id=30640

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4TSS7MJ7OO7JO5BNKCRYSFU7UAYOKLA2/

- https://www.cve.org/CVERecord?id=CVE-2022-2056

- https://www.cve.org/CVERecord?id=CVE-2022-2057

- https://www.cve.org/CVERecord?id=CVE-2022-2058

Topics%20covered

Topics Covered

security advisory denial of service security issue libtiff risk mageia

Resolution

SRPMS

- 8/core/libtiff-4.2.0-1.6.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Jul 2022
URL: https://advisories.mageia.org/MGASA-2022-0267.html
Type: security
CVE: CVE-2022-2056, CVE-2022-2057, CVE-2022-2058

Topics%20covered

Topics Covered

security advisory denial of service security issue libtiff risk mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here