PT-2023-5351 · Libtiff+8 · Libtiff+8
Wangdw.Augustus@Gmail.Com
·
Publicado
2023-02-13
·
Atualizado
2025-06-26
·
CVE-2023-0798
CVSS v3.1
6.8
Média
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
LibTIFF version 4.4.0
Description
The issue is related to an out-of-bounds read in the
tiffcrop function in tools/tiffcrop.c at line 3400, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. The extractContigSamplesShifted8bits() function is also associated with this buffer read issue, potentially leading to a denial-of-service.Recommendations
For LibTIFF version 4.4.0, users who compile libtiff from sources can apply the fix available with commit afaabc3e.
Exploit
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Libtiff
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu