Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-debuginfoUpgrade libtiff-staticUpgrade libtiff-develUpgrade libtiff-debugsource | Feb 17, 2025 | May 10, 2023 |
| Centos_linux | — | Upgrade libtiff-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiffUpgrade libtiff-tools-debuginfo | Jun 13, 2023 | May 9, 2023 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 9, 2023 |
| Redhat_linux | — | Upgrade libtiff-toolsUpgrade libtiff-debuginfoUpgrade libtiff-debugsourceNo solution existsUpgrade libtiff-develUpgrade libtiffUpgrade libtiff-tools-debuginfo | Jun 13, 2023 | May 9, 2023 |
| Ubuntu | — | Upgrade tiffUpgrade tiff (Ubuntu Pro) | Nov 19, 2024 | May 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub