libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libtiffalma-upgrade-libtiff-develalma-upgrade-libtiff-tools | Aug 9, 2024 | Jun 29, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libtiffamazon-linux-ami-2-upgrade-libtiff-debuginfoamazon-linux-ami-2-upgrade-libtiff-develamazon-linux-ami-2-upgrade-libtiff-staticamazon-linux-ami-2-upgrade-libtiff-tools | Oct 6, 2023 | Jun 29, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libtiffamazon-linux-2023-upgrade-libtiff-debuginfoamazon-linux-2023-upgrade-libtiff-debugsourceamazon-linux-2023-upgrade-libtiff-develamazon-linux-2023-upgrade-libtiff-staticamazon-linux-2023-upgrade-libtiff-toolsamazon-linux-2023-upgrade-libtiff-tools-debuginfo | Mar 10, 2025 | Jan 27, 2023 | |
| Debian | debian-upgrade-tiff | Aug 2, 2023 | Jun 29, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libtiff | May 13, 2024 | Jun 29, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libtiff | Jan 10, 2024 | Jun 29, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libtiff | Jul 17, 2024 | Jun 29, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libtifforacle-linux-upgrade-libtiff-develoracle-linux-upgrade-libtiff-tools | Aug 16, 2024 | Jan 27, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libtiffredhat-upgrade-libtiff-debuginforedhat-upgrade-libtiff-debugsourceredhat-upgrade-libtiff-develredhat-upgrade-libtiff-toolsredhat-upgrade-libtiff-tools-debuginfo | Sep 13, 2024 | Jun 29, 2023 | |
| Rocky_linux | rocky-upgrade-libtiffrocky-upgrade-libtiff-debuginforocky-upgrade-libtiff-debugsourcerocky-upgrade-libtiff-develrocky-upgrade-libtiff-toolsrocky-upgrade-libtiff-tools-debuginfo | Aug 22, 2024 | Jun 29, 2023 | |
| Suse | — | suse-upgrade-libtiff-develsuse-upgrade-libtiff-devel-32bitsuse-upgrade-libtiff5suse-upgrade-libtiff5-32bitsuse-upgrade-tiff | Nov 7, 2023 | Jun 29, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libtiff-toolsubuntu-pro-upgrade-libtiff5ubuntu-upgrade-libtiff-toolsubuntu-upgrade-libtiff5ubuntu-upgrade-libtiff6 | Jul 14, 2023 | Jun 29, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub