An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-devel | May 8, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoUpgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-staticUpgrade libtiff-debuginfo | Feb 17, 2025 | Aug 22, 2022 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade libtiff-toolsUpgrade libtiffUpgrade libtiff-devel | May 7, 2024 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoNo solution existsUpgrade libtiff-debuginfoUpgrade libtiffUpgrade libtiff-tools | May 1, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade libtiff5Upgrade libtiff-develUpgrade libtiff5-32bitUpgrade libtiff-devel-32bitUpgrade tiff | Dec 13, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libtiff5 (Ubuntu Pro)Upgrade libtiff-tools (Ubuntu Pro)Upgrade libtiff5Upgrade libtiff-tools | Nov 24, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub