A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-develUpgrade libtiffUpgrade libtiff-tools | May 15, 2023 | May 9, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-debuginfoUpgrade libtiffUpgrade libtiff-staticUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoUpgrade libtiff-develUpgrade libtiff-tools | Feb 17, 2025 | Apr 17, 2023 |
| Centos_linux | — | Upgrade libtiff-debuginfoUpgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoUpgrade libtiff | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 19, 2023 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiffUpgrade libtiff-tools | May 21, 2024 | Apr 17, 2023 |
| Redhat_linux | — | Upgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-debuginfoUpgrade libtiff-develNo solution exists | May 15, 2023 | May 9, 2023 |
| Ubuntu | — | Upgrade tiff (Ubuntu Pro)Upgrade tiff | Nov 19, 2024 | May 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub