An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-devel | May 8, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-develUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-debuginfoUpgrade libtiff-static | Feb 17, 2025 | Aug 22, 2022 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiffUpgrade libtiff-tools | May 7, 2024 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade libtiff-debuginfoUpgrade libtiffNo solution existsUpgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsource | May 1, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade libtiff5Upgrade libtiff-develUpgrade libtiff5-32bitUpgrade libtiff-devel-32bitUpgrade tiff | Dec 13, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libtiff5 (Ubuntu Pro)Upgrade libtiff-toolsUpgrade libtiff-tools (Ubuntu Pro)Upgrade libtiff5 | Nov 24, 2023 | Aug 22, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub