PT-2023-3515 · Libtiff+7 · Libtiff+7

Su_Laus

·

Publicado

2023-02-14

·

Atualizado

2025-06-26

·

CVE-2023-26965

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.5.0 and earlier
Description The issue is related to a heap-based use after free in the loadImage() function, located in tools/tiffcrop.c, which can be triggered by a crafted TIFF image. This can potentially allow an attacker to cause a denial of service.
Recommendations For LibTIFF versions 4.5.0 and earlier, consider updating to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2023:6575
ALT-PU-2025-7185
ALT-PU-2025-7532
ALT-PU-2025-8255
AZL-27165
BDU:2023-03720
CVE-2023-26965
DLA-3513-1
DLA-4026-1
MGASA-2023-0255
OESA-2023-1385
RHSA-2023:6575
RHSA-2023_6575
ROSA-SA-2025-2627
SUSE-SU-2023:4736-1
SUSE-SU-2023:4869-1
USN-6229-1
USN-6290-1

Produtos afetados

Alt Linux
Almalinux
Astra Linux
Libtiff
Linuxmint
Red Hat
Suse
Ubuntu