CVE-2022-2520
Summary
| CVE | CVE-2022-2520 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-08-31 16:15:00 UTC |
|---|
| Updated | 2023-02-28 15:39:00 UTC |
|---|
| Description | A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Debian -- Security Information -- DSA-5333-1 tiff |
DEBIAN |
www.debian.org |
|
| tiffcrop: sysmalloc assertion in rotateImage() at tiffcrop.c:8621 (#424) · Issues · libtiff / libtiff · GitLab |
MISC |
gitlab.com |
|
| tiffcrop: -S option mutually exclusive (fixes #349, #414, #422, #423, #424) (!378) · Merge requests · libtiff / libtiff · GitLab |
MISC |
gitlab.com |
|
| 2122792 – (CVE-2022-2520) CVE-2022-2520 libtiff: Assertion fail in rotateImage() function at tiffcrop.c |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160390 Oracle Enterprise Linux Security Update for libtiff (ELSA-2023-0095)
- 160411 Oracle Enterprise Linux Security Update for libtiff (ELSA-2023-0302)
- 181520 Debian Security Update for tiff (DSA 5333-1)
- 182016 Debian Security Update for tiff (CVE-2022-2520)
- 199019 Ubuntu Security Notification for LibTIFF Vulnerabilities (USN-5714-1)
- 241054 Red Hat Update for libtiff (RHSA-2023:0095)
- 241120 Red Hat Update for libtiff (RHSA-2023:0302)
- 355148 Amazon Linux Security Advisory for libtiff : ALAS2023-2023-067
- 502794 Alpine Linux Security Update for tiff
- 503030 Alpine Linux Security Update for tiff
- 503131 Alpine Linux Security Update for tiff
- 505944 Alpine Linux Security Update for tiff
- 673143 EulerOS Security Update for libtiff (EulerOS-SA-2023-2298)
- 673160 EulerOS Security Update for libtiff (EulerOS-SA-2023-2274)
- 752686 SUSE Enterprise Linux Security Update for tiff (SUSE-SU-2022:3679-1)
- 752701 SUSE Enterprise Linux Security Update for tiff (SUSE-SU-2022:3690-1)
- 940871 AlmaLinux Security Update for libtiff (ALSA-2023:0095)
- 940898 AlmaLinux Security Update for libtiff (ALSA-2023:0302)
- 960525 Rocky Linux Security Update for libtiff (RLSA-2023:0302)
- 960537 Rocky Linux Security Update for libtiff (RLSA-2023:0095)
