Skip to content
OpenAdvisories
Medium ALAS2023-2023-376 1 CVE

Moderate: jbigkit security update (Amazon Linux 2023)

Published Sep 27, 2023 · Updated Oct 3, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-1210: A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2023 jbigkit 0:2.1-21.amzn2023.0.2
Amazon Linux · 2023 jbigkit-debuginfo 0:2.1-21.amzn2023.0.2
Amazon Linux · 2023 jbigkit-debugsource 0:2.1-21.amzn2023.0.2
Amazon Linux · 2023 jbigkit-devel 0:2.1-21.amzn2023.0.2
Amazon Linux · 2023 jbigkit-libs 0:2.1-21.amzn2023.0.2
Amazon Linux · 2023 jbigkit-libs-debuginfo 0:2.1-21.amzn2023.0.2

Vulnerabilities 1

  • Medium 4.3
    CVE-2022-1210

    LibTIFF tiff2ps resource consumption

    A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction.…

    tiff libtiff jbigkit Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-1210.html