An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-devel | May 8, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-staticUpgrade libtiffUpgrade libtiff-debuginfoUpgrade libtiff-tools-debuginfoUpgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-debugsource | Feb 17, 2025 | Aug 22, 2022 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff | May 7, 2024 | Aug 22, 2022 |
| Redhat_linux | — | No solution existsUpgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiff-tools-debuginfo | May 1, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade tiffUpgrade libtiff-devel-32bitUpgrade libtiff5-32bitUpgrade libtiff-develUpgrade libtiff5 | Dec 13, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libtiff5 (Ubuntu Pro)Upgrade libtiff-toolsUpgrade libtiff5Upgrade libtiff-tools (Ubuntu Pro) | Nov 24, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub