Libtiff: potential integer overflow in raw2tiff.c
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| unaffected |
|
||||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 6 | unknown | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unknown | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unknown | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — |
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 9 | |||
| libtiff-0:4.4.0-12.el9 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:2289 | 2024-04-30T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-5567-1 | tiff security update |
EUVD |
EUVD-2023-45692 | A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 1.3% (1.295% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 |
cpe:/a:redhat:enterprise_linux:8 cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-122 |
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-680 |
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-122 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|