5.5Orta

CVE-2023-3576Libtiff: memory leak in tiffcrop.c

Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8 Yayım: (3 yıl önce)

Açıklama

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.

Zayıflık türü (CWE): CWE-119CWE-401

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
enterprise linux 9 —
fedoraproject fedora —
libtiff libtiff < 4.5.1
redhat enterprise linux 8.0
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (4)

  • cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* < 4.5.1
  • cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*