{"metadata": {"vulnerability": "CVE-2022-4645", "count": 117, "kinds": {"milestone": 23, "sighting": 2, "kev": 0, "other": 92}}, "data": [{"timestamp": "2022-02-24T00:00:00Z", "date_only": false, "value": "2022-02-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-02-24T00:00:00Z", "date_only": false, "value": "2022-02-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2022-03-21T00:00:00Z", "date_only": false, "value": "2022-03-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-03-21T00:00:00Z", "date_only": false, "value": "2022-03-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-05-22T00:00:00Z", "date_only": false, "value": "2022-05-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2022-05-22T00:00:00Z", "date_only": false, "value": "2022-05-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2022-06-13T00:00:00Z", "date_only": false, "value": "2022-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2022-06-13T00:00:00Z", "date_only": false, "value": "2022-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2022-10-23T00:00:00Z", "date_only": false, "value": "2022-10-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-10-23T00:00:00Z", "date_only": false, "value": "2022-10-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-11-08T00:00:00Z", "date_only": false, "value": "2022-11-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2022-11-08T00:00:00Z", "date_only": false, "value": "2022-11-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2022-11-16T00:00:00Z", "date_only": false, "value": "2022-11-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2022-11-16T00:00:00Z", "date_only": false, "value": "2022-11-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2022-12-22T00:00:00Z", "date_only": false, "value": "2022-12-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-4645", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T00:00:00Z", "date_only": true, "value": "2023-03-03", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-4645", "record": "GSD-2022-4645", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-4645", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-03T16:15:00Z", "date_only": false, "value": "2023-03-03T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6FR2-GJ2W-XGR6", "record": "GHSA-6FR2-GJ2W-XGR6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-03-03T16:15:00Z", "date_only": false, "value": "2023-03-03T16:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-4645", "record": "UBUNTU-CVE-2022-4645", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T16:15:00Z", "date_only": false, "value": "2023-03-03T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-4645", "record": "GSD-2022-4645", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-03-03T16:15:09.777Z", "date_only": false, "value": "2023-03-03T16:15:09.777", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4645", "record": "FKIE_CVE-2022-4645", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T18:30:27Z", "date_only": false, "value": "2023-03-03T18:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6FR2-GJ2W-XGR6", "record": "GHSA-6FR2-GJ2W-XGR6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-03T18:34:44Z", "date_only": false, "value": "2023-03-03T18:34:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/59387", "record": "CVE-2022-4645", "field": "creation_timestamp", "uuid": "6bb523c8-a097-4531-bf36-013a9198c7e0", "content": "\u203c CVE-2022-4645 \u203c\n\nLibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/59387"}, {"timestamp": "2023-03-05T23:00:00Z", "date_only": false, "value": "2023-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-03-05T23:00:00Z", "date_only": false, "value": "2023-03-05T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-05T23:00:00Z", "date_only": false, "value": "2023-03-05T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": true, "value": "2023-03-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-15744", "record": "CNVD-2023-15744", "field": "submitTime", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-07T23:00:00Z", "date_only": false, "value": "2023-03-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-03-09T00:00:00Z", "date_only": true, "value": "2023-03-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-15744", "record": "CNVD-2023-15744", "field": "openTime", "linked_record": true}, {"timestamp": "2023-03-09T15:30:50Z", "date_only": false, "value": "2023-03-09T15:30:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6FR2-GJ2W-XGR6", "record": "GHSA-6FR2-GJ2W-XGR6", "field": "modified", "linked_record": true}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-31T00:00:00Z", "date_only": true, "value": "2023-03-31", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-4645", "record": "GSD-2022-4645", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2023-03-31T00:00:00Z", "date_only": false, "value": "2023-03-31T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2022-4645", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-03-31T11:15:00Z", "date_only": false, "value": "2023-03-31T11:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-4645", "record": "GSD-2022-4645", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-04-17T00:00:00Z", "date_only": false, "value": "2023-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2023-04-17T00:00:00Z", "date_only": false, "value": "2023-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2023-04-17T00:00:00Z", "date_only": false, "value": "2023-04-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2023-04-17T00:00:00Z", "date_only": false, "value": "2023-04-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2023-05-09T00:00:00Z", "date_only": false, "value": "2023-05-09T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:2340", "record": "ALSA-2023:2340", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-09T10:02:52Z", "date_only": false, "value": "2023-05-09T10:02:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-09T10:02:52Z", "date_only": false, "value": "2023-05-09T10:02:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-09T10:02:52Z", "date_only": false, "value": "2023-05-09T10:02:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-09T10:02:52Z", "date_only": false, "value": "2023-05-09T10:02:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-09T10:02:52Z", "date_only": false, "value": "2023-05-09T10:02:52+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-09T10:02:52Z", "date_only": false, "value": "2023-05-09T10:02:52+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-09T22:00:00Z", "date_only": false, "value": "2023-05-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-05-10T00:00:00Z", "date_only": false, "value": "2023-05-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2023-05-10T00:00:00Z", "date_only": false, "value": "2023-05-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2023-05-12T06:12:08Z", "date_only": false, "value": "2023-05-12T06:12:08Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:2340", "record": "ALSA-2023:2340", "field": "modified", "linked_record": true}, {"timestamp": "2023-05-15T00:00:00Z", "date_only": false, "value": "2023-05-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2023-05-15T00:00:00Z", "date_only": false, "value": "2023-05-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2023-08-31T12:21:32.328Z", "date_only": false, "value": "2023-08-31T12:21:32.32857Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-4645", "record": "BELL-CVE-2022-4645", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-13T01:19:15.479Z", "date_only": false, "value": "2023-12-13T01:19:15.479248Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-4645", "record": "GSD-2022-4645", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-21T22:00:00Z", "date_only": false, "value": "2024-05-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2024-05-22T00:00:00Z", "date_only": false, "value": "2024-05-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2024:3059", "record": "ALSA-2024:3059", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-05-22T09:28:57Z", "date_only": false, "value": "2024-05-22T09:28:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-05-22T09:28:57Z", "date_only": false, "value": "2024-05-22T09:28:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-05-22T09:28:57Z", "date_only": false, "value": "2024-05-22T09:28:57+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-05-22T09:28:57Z", "date_only": false, "value": "2024-05-22T09:28:57+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-05-22T09:28:57Z", "date_only": false, "value": "2024-05-22T09:28:57+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-05-22T09:28:57Z", "date_only": false, "value": "2024-05-22T09:28:57+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-05-29T14:42:13Z", "date_only": false, "value": "2024-05-29T14:42:13Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2024:3059", "record": "ALSA-2024:3059", "field": "modified", "linked_record": true}, {"timestamp": "2024-08-03T01:48:39.676Z", "date_only": false, "value": "2024-08-03T01:48:39.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-4645", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-22T21:20:57Z", "date_only": false, "value": "2024-11-22T21:20:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T21:20:57Z", "date_only": false, "value": "2024-11-22T21:20:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T21:20:57Z", "date_only": false, "value": "2024-11-22T21:20:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_2340", "record": "RHSA-2023_2340", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T21:21:19Z", "date_only": false, "value": "2024-11-22T21:21:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T21:21:19Z", "date_only": false, "value": "2024-11-22T21:21:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T21:21:19Z", "date_only": false, "value": "2024-11-22T21:21:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024_3059", "record": "RHSA-2024_3059", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-12-13T00:00:00Z", "date_only": true, "value": "2024-12-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1103", "record": "CERTFR-2024-AVI-1103", "field": "vendor_advisories.5.published_at", "linked_record": true}, {"timestamp": "2024-12-16T00:00:00Z", "date_only": true, "value": "2024-12-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1103", "record": "CERTFR-2024-AVI-1103", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2024-12-17T00:00:00Z", "date_only": true, "value": "2024-12-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1103", "record": "CERTFR-2024-AVI-1103", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2024-12-20T00:00:00Z", "date_only": false, "value": "2024-12-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1103", "record": "CERTFR-2024-AVI-1103", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-03-05T20:04:27.466Z", "date_only": false, "value": "2025-03-05T20:04:27.466331Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-4645", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-05T20:04:27.466Z", "date_only": false, "value": "2025-03-05T20:04:27.466331Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4645", "record": "FKIE_CVE-2022-4645", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-04T20:37:39.327Z", "date_only": false, "value": "2025-04-04T20:37:39.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-4645", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-04T20:37:39.327Z", "date_only": false, "value": "2025-04-04T20:37:39.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-4645", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-04T21:36:38Z", "date_only": false, "value": "2025-04-04T21:36:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10578", "record": "CVE-2022-4645", "field": "creation_timestamp", "uuid": "d84845b5-132d-423c-ab17-c1dc9239ad0d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4645\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T20:37:39.327Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/277\n2. https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4645.json\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BA6GRCAQ7NR2OK5N44UQRGUJBIYKWJJH/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZTFA6GGOKFPIQNHDBMXYUR4XUXUJESE/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLM763GGZVVOAXIQXG6YGTYJ5VFYNECQ/\n7. https://security.netapp.com/advisory/ntap-20230331-0001/", "url": "https://t.me/DarkWebInformer_CVEAlerts/10578", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-07-01T08:27:45.001Z", "date_only": false, "value": "2025-07-01T08:27:45.001+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0570", "record": "WID-SEC-W-2023-0570", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-10-20T00:21:27.840Z", "date_only": false, "value": "2025-10-20T00:21:27.840Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": true, "value": "2025-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": true, "value": "2026-02-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-04-22T07:41:24Z", "date_only": false, "value": "2026-04-22T07:41:24Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-4645", "record": "UBUNTU-CVE-2022-4645", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T05:21:26.507Z", "date_only": false, "value": "2026-06-17T05:21:26.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4645", "record": "FKIE_CVE-2022-4645", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-03T01:45:22Z", "date_only": false, "value": "2026-07-03T01:45:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-07-03T01:45:22Z", "date_only": false, "value": "2026-07-03T01:45:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-07-03T01:45:22Z", "date_only": false, "value": "2026-07-03T01:45:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:3059", "record": "RHSA-2024:3059", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-04T06:00:35.994Z", "date_only": false, "value": "2026-09-04T06:00:35.994858Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-4645", "record": "BELL-CVE-2022-4645", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-04T06:00:35.994Z", "date_only": false, "value": "2026-09-04T06:00:35.994858Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-4645", "record": "BELL-CVE-2022-4645", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-06T20:26:41Z", "date_only": false, "value": "2026-11-06T20:26:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-06T20:26:41Z", "date_only": false, "value": "2026-11-06T20:26:41+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-06T20:26:41Z", "date_only": false, "value": "2026-11-06T20:26:41+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-06T21:05:29.352Z", "anchors": {"origin": {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-04-04T21:36:38Z", "date_only": false, "value": "2025-04-04T21:36:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10578", "record": "CVE-2022-4645", "field": "creation_timestamp", "uuid": "d84845b5-132d-423c-ab17-c1dc9239ad0d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4645\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T20:37:39.327Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/277\n2. https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4645.json\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BA6GRCAQ7NR2OK5N44UQRGUJBIYKWJJH/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZTFA6GGOKFPIQNHDBMXYUR4XUXUJESE/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLM763GGZVVOAXIQXG6YGTYJ5VFYNECQ/\n7. https://security.netapp.com/advisory/ntap-20230331-0001/", "url": "https://t.me/DarkWebInformer_CVEAlerts/10578", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 66173798.0, "hours": 18381.610555555555, "days": 765.9004398148148, "min_seconds": 66087398.0, "max_seconds": 66173798.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-04-04T21:36:38Z", "date_only": false, "value": "2025-04-04T21:36:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10578", "record": "CVE-2022-4645", "field": "creation_timestamp", "uuid": "d84845b5-132d-423c-ab17-c1dc9239ad0d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4645\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T20:37:39.327Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/277\n2. https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4645.json\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BA6GRCAQ7NR2OK5N44UQRGUJBIYKWJJH/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZTFA6GGOKFPIQNHDBMXYUR4XUXUJESE/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLM763GGZVVOAXIQXG6YGTYJ5VFYNECQ/\n7. https://security.netapp.com/advisory/ntap-20230331-0001/", "url": "https://t.me/DarkWebInformer_CVEAlerts/10578", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 345600.0, "hours": 96.0, "days": 4.0, "min_seconds": 259200.0, "max_seconds": 432000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-03T00:00:00Z", "date_only": false, "value": "2023-03-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 518400.0, "hours": 144.0, "days": 6.0, "min_seconds": 432000.0, "max_seconds": 604800.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 518400.0, "hours": 144.0, "days": 6.0, "min_seconds": 432000.0, "max_seconds": 604800.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2340", "record": "RHSA-2023:2340", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -65655398.0, "hours": -18237.610555555555, "days": -759.9004398148148, "min_seconds": -65655398.0, "max_seconds": -65568998.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2025-04-04T21:36:38Z", "date_only": false, "value": "2025-04-04T21:36:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10578", "record": "CVE-2022-4645", "field": "creation_timestamp", "uuid": "d84845b5-132d-423c-ab17-c1dc9239ad0d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4645\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T20:37:39.327Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/277\n2. https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4645.json\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BA6GRCAQ7NR2OK5N44UQRGUJBIYKWJJH/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZTFA6GGOKFPIQNHDBMXYUR4XUXUJESE/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLM763GGZVVOAXIQXG6YGTYJ5VFYNECQ/\n7. https://security.netapp.com/advisory/ntap-20230331-0001/", "url": "https://t.me/DarkWebInformer_CVEAlerts/10578", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4645", "record": "MSRC_CVE-2022-4645", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}