Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2023-3164

Published: 02/11/2023 Updated: 08/03/2024
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Libtiff

Vulnerability Summary

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows malicious users to cause a denial of service via a crafted tiff file.

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff

redhat enterprise linux 7.0

redhat enterprise linux 8.0

redhat enterprise linux 9.0

Vendor Advisories

Amazon Linux 2: ALAS2-2023-2300
There exists one heap buffer overflow in _TIFFmemcpy in tif_unixc in libtiff 4010, which allows an attacker to cause a denial-of-service through a crafted tiff file (CVE-2020-18768) A heap buffer overflow in ExtractImageSection function in tiffcropc in libtiff library Version 430 allows attacker to trigger unsafe or out of bounds memory acce ...

References

CWE-787https://access.redhat.com/security/cve/CVE-2023-3164https://bugzilla.redhat.com/show_bug.cgi?id=2213531https://gitlab.com/libtiff/libtiff/-/issues/542https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2023-2300.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook