6.5
CVSSv3

CVE-2023-3618

Published: 12/07/2023 Updated: 23/03/2024
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff

debian debian linux 10.0

redhat enterprise linux 8.0

redhat enterprise linux 9.0

Vendor Advisories

Debian Bug report logs - #1040945 tiff: CVE-2023-3618 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 12 Jul 2023 19:39:01 UTC Severity: important Tags: security, upstream Found in version tiff/451-1 Forwar ...

Github Repositories

CLI tool to validate CVE v5 JSON records.

cvelint CVE records in the v5 JSON schema may include errors that are neither enforceable by a schema, nor validated on the backend in CVE Services when a CVE record is created/updated This CLI tool aims to validate CVE records for such errors Installation Binary Releases For Linux, Mac OS, or Windows, you can download a binary release here Build from Source $ git clone http