A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-tools | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libtiff-develUpgrade libtiff-debuginfoUpgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-static | Oct 6, 2023 | May 19, 2023 |
| Amazon_linux | — | Upgrade libtiff | Oct 7, 2023 | May 19, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-toolsUpgrade libtiff-debugsourceUpgrade libtiff-debuginfoUpgrade libtiff-tools-debuginfoUpgrade libtiff-staticUpgrade libtiff-develUpgrade libtiff | Feb 17, 2025 | Apr 17, 2023 |
| Apple Osx Appsupport | — | Upgrade macOS to the latest version | Oct 31, 2023 | Oct 25, 2023 |
| Centos_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-debuginfoUpgrade libtiff-tools-debuginfo | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 19, 2023 |
| Oracle_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-tools | May 21, 2024 | Apr 17, 2023 |
| Redhat_linux | — | Upgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-debugsourceNo solution existsUpgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-debuginfo | May 15, 2023 | May 9, 2023 |
| Ubuntu | — | Upgrade tiff (Ubuntu Pro)Upgrade tiff | Nov 19, 2024 | May 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub