An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-devel | May 8, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-debuginfoUpgrade libtiffUpgrade libtiff-staticUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiff-tools-debuginfoUpgrade libtiff-tools | Feb 17, 2025 | Aug 22, 2022 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-tools | May 7, 2024 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade libtiffUpgrade libtiff-toolsNo solution existsUpgrade libtiff-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiff-tools-debuginfo | May 1, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade libtiff5-32bitUpgrade libtiff5Upgrade libtiff-develUpgrade tiffUpgrade libtiff-devel-32bit | Dec 13, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libtiff-tools (Ubuntu Pro)Upgrade libtiff-toolsUpgrade libtiff5Upgrade libtiff5 (Ubuntu Pro) | Nov 24, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub