Fedora: Security Advisory for libtiff packag
Reporter | Title | Published | Views | Family All 153 |
---|---|---|---|---|
![]() | Photon OS 3.0: Libtiff PHSA-2022-3.0-0421 | 24 Jul 202400:00 | – | nessus |
![]() | SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2022:2647-1) | 4 Aug 202200:00 | – | nessus |
![]() | EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-2443) | 8 Oct 202200:00 | – | nessus |
![]() | Photon OS 4.0: Libtiff PHSA-2022-4.0-0214 | 23 Jul 202400:00 | – | nessus |
![]() | SUSE SLES12 Security Update : tiff (SUSE-SU-2022:2648-1) | 4 Aug 202200:00 | – | nessus |
![]() | EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2023-1170) | 11 Jan 202300:00 | – | nessus |
![]() | EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2023-1149) | 10 Jan 202300:00 | – | nessus |
![]() | EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2825) | 21 Dec 202200:00 | – | nessus |
![]() | EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2850) | 21 Dec 202200:00 | – | nessus |
![]() | Slackware Linux 14.2 / 15.0 / current libtiff Multiple Vulnerabilities (SSA:2023-003-01) | 4 Jan 202300:00 | – | nessus |
# Copyright (C) 2022 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.821461");
script_version("2022-07-25T10:11:13+0000");
script_cve_id("CVE-2022-2056", "CVE-2022-2057", "CVE-2022-2058");
script_tag(name:"cvss_base", value:"4.3");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:N/I:N/A:P");
script_tag(name:"last_modification", value:"2022-07-25 10:11:13 +0000 (Mon, 25 Jul 2022)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2022-07-08 12:48:00 +0000 (Fri, 08 Jul 2022)");
script_tag(name:"creation_date", value:"2022-07-22 01:09:42 +0000 (Fri, 22 Jul 2022)");
script_name("Fedora: Security Advisory for libtiff (FEDORA-2022-b9c2a3a2b7)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone Networks GmbH");
script_family("Fedora Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC35");
script_xref(name:"Advisory-ID", value:"FEDORA-2022-b9c2a3a2b7");
script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXUMJXVEAYFWRO3U3YHKSULHIVDOLEQS");
script_tag(name:"summary", value:"The remote host is missing an update for the 'libtiff'
package(s) announced via the FEDORA-2022-b9c2a3a2b7 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"The libtiff package contains a library of functions for manipulating
TIFF (Tagged Image File Format) image format files. TIFF is a widely
used file format for bitmapped images. TIFF files usually end in the
.tif extension and they are often quite large.
The libtiff package should be installed if you need to manipulate TIFF
format image files.");
script_tag(name:"affected", value:"'libtiff' package(s) on Fedora 35.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "FC35") {
if(!isnull(res = isrpmvuln(pkg:"libtiff", rpm:"libtiff~4.4.0~2.fc35", rls:"FC35"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo