Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2023-25433

Published: 29/06/2023 Updated: 01/08/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Libtiff

Vulnerability Summary

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff 4.5.0

Vendor Advisories

Amazon Linux 2: ALAS2-2023-2274
libtiff 450 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcropc:8499 Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV (CVE-2023-25433) A vulnerability was found in libtiff library This security flaw causes a heap buffer overflow issue via TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS ...

References

CWE-120https://gitlab.com/libtiff/libtiff/-/issues/520https://gitlab.com/libtiff/libtiff/-/merge_requests/467https://lists.debian.org/debian-lts-announce/2023/07/msg00034.htmlhttps://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2023-2274.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
brute forceCVE-2024-24908open redirectCVE-2024-31497CVE-2023-45866CVE-2024-4135CVE-2024-25523cache poisoningCVE-2024-4649
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook