A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff | May 15, 2023 | May 9, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-tools-debuginfoUpgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-staticUpgrade libtiff-debuginfoUpgrade libtiff | Feb 17, 2025 | Apr 17, 2023 |
| Centos_linux | — | Upgrade libtiff-develUpgrade libtiff-debuginfoUpgrade libtiff-debugsourceUpgrade libtiffUpgrade libtiff-tools-debuginfo | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 19, 2023 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiffUpgrade libtiff-tools | May 21, 2024 | Apr 17, 2023 |
| Redhat_linux | — | Upgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-tools-debuginfoUpgrade libtiff-debugsourceNo solution existsUpgrade libtiff-develUpgrade libtiff-debuginfo | May 15, 2023 | May 9, 2023 |
| Ubuntu | — | Upgrade tiffUpgrade tiff (Ubuntu Pro) | Nov 19, 2024 | May 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub