Published: 04/10/2023 Updated: 11/03/2024

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an malicious user to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff
fedoraproject fedora -
redhat enterprise linux 8.0
redhat enterprise linux 9.0

Synopsis Low: Logging Subsystem 581- Red Hat OpenShift security update Type/Severity Security Advisory: Low Topic An update is now available for RHOL-58-RHEL-9Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, i ...

Synopsis Moderate: libtiff security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libtiff is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a se ...

Multiple buffer overflows and memory leak issues have been found in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image For the oldstable distribution (bullseye), these problems have been fixed in version 420-1+deb11u5 For the stable distribution (bookworm), these prob ...

Memory leak in memory leak in tiffcropc (CVE-2023-3576) ...

CWE-401 https://access.redhat.com/security/cve/CVE-2023-3576 https://bugzilla.redhat.com/show_bug.cgi?id=2219340 https://access.redhat.com/errata/RHSA-2023:6575 https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html https://access.redhat.com/errata/RHSA-2023:7720 https://www.debian.org/security/2023/dsa-5567 https://nvd.nist.gov

CVE-2023-3576

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect