Skip to content
OpenAdvisories
Medium ALAS2-2023-2305 1 CVE

Moderate: jbigkit security update (Amazon Linux 2)

Published Oct 12, 2023 · Updated Oct 19, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1210: A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 jbigkit 0:2.0-11.amzn2.0.3
Amazon Linux · 2 jbigkit-debuginfo 0:2.0-11.amzn2.0.3
Amazon Linux · 2 jbigkit-devel 0:2.0-11.amzn2.0.3
Amazon Linux · 2 jbigkit-libs 0:2.0-11.amzn2.0.3

Vulnerabilities 1

  • Medium 4.3
    CVE-2022-1210

    LibTIFF tiff2ps resource consumption

    A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction.…

    tiff libtiff jbigkit Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-1210.html