PT-2023-4824 · Libtiff+9 · Libtiff+9

Tej Rathi

·

Publicado

2023-07-12

·

Atualizado

2025-06-26

·

CVE-2023-3618

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libtiff (affected versions not specified)
Description A flaw was found in libtiff, where a specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif fax3.c, resulting in a denial of service. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

ALSA-2024:2289
ALT-PU-2025-7185
ALT-PU-2025-7532
ALT-PU-2025-8255
AZL-27678
AZL-43489
AZL-43888
AZL-44391
AZL-45195
BDU:2023-05287
CVE-2023-3618
DLA-3513-1
DLA-4026-1
INFSA-2024_2289
MGASA-2023-0255
OESA-2023-1534
OPENSUSE-SU-2023_4370-1
RHSA-2024:2289
RHSA-2024_2289
SUSE-SU-2023:4370-1
SUSE-SU-2023:4371-1
USN-6290-1

Produtos afetados

Alt Linux
Almalinux
Astra Linux
Linuxmint
Apple Macos
Red Hat
Red Os
Suse
Ubuntu
Libtiff