An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff | May 8, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-debuginfoUpgrade libtiff-staticUpgrade libtiffUpgrade libtiff-debugsourceUpgrade libtiff-toolsUpgrade libtiff-tools-debuginfoUpgrade libtiff-devel | Feb 17, 2025 | Aug 22, 2022 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libtiff | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff | May 7, 2024 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade libtiff-debuginfoNo solution existsUpgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfo | May 1, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade tiffUpgrade libtiff-devel-32bitUpgrade libtiff5Upgrade libtiff-develUpgrade libtiff5-32bit | Dec 13, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libtiff5 (Ubuntu Pro)Upgrade libtiff5Upgrade libtiff-toolsUpgrade libtiff-tools (Ubuntu Pro) | Nov 24, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub