PT-2023-8624 · Libtiff+9 · Libtiff+9

Guilherme De Almeida Suckevicz

·

CVE-2023-6228

·

Publicado

2023-09-07

·

Atualizado

2026-07-06

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions libtiff (affected versions not specified)
Description The issue is related to a heap-based buffer overflow in the tiffcp utility distributed by the libtiff package. This occurs when a crafted TIFF file is processed, potentially leading to an application crash. The vulnerability is associated with the cpStripToTile() function in the tools/tiffcp.c file of the LibTIFF library. Exploitation of this vulnerability may allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2024:2289
ALSA-2024:5079
ALT-PU-2025-7532
ALT-PU-2025-8255
AZL-32176
AZL-34956
BDU:2024-01277
CESA-2024_5079
CVE-2023-6228
ECHO-B538-3DDD-BCDA
INFSA-2024_2289
INFSA-2024_5079
MGASA-2024-0164
OESA-2023-1857
RHSA-2024:2289
RHSA-2024:5079
RHSA-2024_2289
RHSA-2024_5079
RLSA-2024:5079
USN-6644-1
USN-6644-2

Produtos afetados

Alt Linux
Almalinux
Centos
Debian
Linuxmint
Red Hat
Red Os
Rocky Linux
Ubuntu
Libtiff