CVE-2022-0909

Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.

Link	Resource
https://gitlab.com/libtiff/libtiff/-/merge_requests/310	Patch Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/393	Exploit Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0909.json	Third Party Advisory
https://www.debian.org/security/2022/dsa-5108	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/	Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0002/	Third Party Advisory
https://security.gentoo.org/glsa/202210-10	Third Party Advisory

Configuration 1

cpe:2.3:a:libtiff:libtiff:4.3.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

---

Published : 2022-03-11 06:15

Updated : 2022-11-07 08:38

---

NVD link : CVE-2022-0909

Mitre link : CVE-2022-0909

No products.

CWE-369

Divide By Zero