Published: 05/10/2023 Updated: 07/11/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote malicious users to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff
fedoraproject fedora -
redhat enterprise linux 8.0
redhat enterprise linux 9.0

Multiple buffer overflows and memory leak issues have been found in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image For the oldstable distribution (bullseye), these problems have been fixed in version 420-1+deb11u5 For the stable distribution (bookworm), these prob ...

Multiple potential integer overflow in raw2tiffc in libtiff <= 451 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow (CVE-2023-41175) ...

CWE-190 https://access.redhat.com/security/cve/CVE-2023-41175 https://bugzilla.redhat.com/show_bug.cgi?id=2235264 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5567

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-41175

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect