Lucene search

CVE-2022-2058

🗓️ 30 Jun 2022 16:08:15Reported by GitLabType

cve🔗 web.nvd.nist.gov👁 138 Views🌐 6 Media mentions

CVE-2022-2058: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010

Reporter	Title	Published	Views	Family All 125
Veracode	Denial Of Service	5 Jul 202215:25	–	veracode
CBLMariner	CVE-2022-2058 affecting package libtiff 4.4.0-1	24 Nov 202200:45	–	cbl_mariner
CBLMariner	CVE-2022-2058 affecting package libtiff for versions less than 4.4.0-6	30 Nov 202204:44	–	cbl_mariner
NVD	CVE-2022-2058	30 Jun 202216:15	–	nvd
Cvelist	CVE-2022-2058	30 Jun 202200:00	–	cvelist
CNVD	LibTIFF Information Disclosure Vulnerability (CNVD-2023-49828)	4 Jul 202200:00	–	cnvd
Tenable Nessus	CBL Mariner 2.0 Security Update: libtiff (CVE-2022-2058)	20 Mar 202300:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2022:2647-1)	4 Aug 202200:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : tiff (SUSE-SU-2022:2648-1)	4 Aug 202200:00	–	nessus
Tenable Nessus	Photon OS 3.0: Libtiff PHSA-2022-3.0-0421	24 Jul 202400:00	–	nessus

Nvd

Vulners

Node

libtiff libtiffMatch4.4.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "vendor": "libtiff",
    "product": "libtiff",
    "versions": [
      {
        "version": "=4.4.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/libtiff/libtiff/-/merge_requests/346
debian	www.debian.org/security/2023/dsa-5333
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00018.html
gitlab	www.gitlab.com/libtiff/libtiff/-/issues/428
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TSS7MJ7OO7JO5BNKCRYSFU7UAYOKLA2/
security	www.security.netapp.com/advisory/ntap-20220826-0001/
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2058.json
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXUMJXVEAYFWRO3U3YHKSULHIVDOLEQS/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Jun 2022 16:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS24.3

CVSS36.5

EPSS0.003

CWE-369