Summary
[4.0.9-26]
- Fix various CVEs
- Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953
[4.0.9-25]
- Fix CVE-2022-2867 (#2118857)
- Fix CVE-2022-2868 (#2118882)
- Fix CVE-2022-2869 (#2118878)
[4.0.9-24]
- Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058
- Resolves: #2103222
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libtiff | 0:4.0.9-26.el8_7 |
| Oracle Linux · 8 | libtiff-devel | 0:4.0.9-26.el8_7 |
| Oracle Linux · 8 | libtiff-tools | 0:4.0.9-26.el8_7 |
Vulnerabilities 10
-
Medium 5.5
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file…
-
Medium 5.5
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file…
-
Medium 5.5
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file…
-
Medium 5.5
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a …
-
Unscored —
There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1
-
Unscored —
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can …
-
Unscored —
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 call…
-
Unscored —
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supp…
-
Unscored —
libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately caus…
-
Unscored —CVE-2022-2869 Public exploit
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSample…