Published: 05/10/2023 Updated: 21/01/2024

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

LibTIFF is vulnerable to an integer overflow. This flaw allows remote malicious users to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff
fedoraproject fedora -
redhat enterprise linux 8.0
netapp active iq unified manager -
redhat enterprise linux 9.0

Multiple buffer overflows and memory leak issues have been found in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image For the oldstable distribution (bullseye), these problems have been fixed in version 420-1+deb11u5 For the stable distribution (bookworm), these prob ...

CWE-190 https://access.redhat.com/security/cve/CVE-2023-40745 https://bugzilla.redhat.com/show_bug.cgi?id=2235265 https://security.netapp.com/advisory/ntap-20231110-0005/https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5567

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-40745

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect