Read the docs
Red Hat Security Advisory

RHSA-2023:5353

libtiff security update

Released 2023-09-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

TI-2023-00764 CVE-2023-0804 · GHSA-wq4c-r2c3-fv9c

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00763 CVE-2023-0803 · GHSA-2rv8-rcwh-2x8r

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00762 CVE-2023-0802 · GHSA-rxvx-wrgw-qpv7

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00761 CVE-2023-0801 · GHSA-29xc-g6f6-8cf9

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00760 CVE-2023-0800 · GHSA-5wrv-vvhx-3wgq

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787