Bug 2064146 (CVE-2022-0909)

Summary: CVE-2022-0909 tiff: Divide By Zero error in tiffcrop
Product: [Other] Security Response Reporter: TEJ RATHI <trathi>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: erik-fedora, mike, mmuzila, neuro-sig, nforro, phracek, rh-spice-bugs, sanjay.ankur
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
A floating-point exception (FPE) flaw was found in LibTIFF’s computeOutputPixelOffsets() function in tiffcrop.c file. This flaw allows an attacker with a crafted TIFF file to trigger a divide-by-zero error, causing a crash that leads to a denial of service.
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-12-06 21:34:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 2064150, 2064152, 2070002, 2070003, 2070004    
Bug Blocks: 2064157    

Description TEJ RATHI 2022-03-15 07:14:44 UTC
Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.


Comment 1 TEJ RATHI 2022-03-15 07:15:14 UTC
Created libtiff tracking bugs for this issue:

Affects: fedora-all [bug 2064152]

Created mingw-libtiff tracking bugs for this issue:

Affects: fedora-all [bug 2064150]

Comment 4 errata-xmlrpc 2022-11-08 09:45:09 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:7585 https://access.redhat.com/errata/RHSA-2022:7585

Comment 5 errata-xmlrpc 2022-11-15 10:35:18 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2022:8194 https://access.redhat.com/errata/RHSA-2022:8194

Comment 6 Product Security DevOps Team 2022-12-06 21:34:43 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):