A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff | May 15, 2023 | May 9, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiff-debuginfoUpgrade libtiff-staticUpgrade libtiffUpgrade libtiff-tools-debuginfoUpgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff-debugsource | Feb 17, 2025 | Apr 17, 2023 |
| Centos_linux | — | Upgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-debuginfoUpgrade libtiff-debugsourceUpgrade libtiff-devel | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 19, 2023 |
| Oracle_linux | — | Upgrade libtiffUpgrade libtiff-toolsUpgrade libtiff-devel | May 21, 2024 | Apr 17, 2023 |
| Redhat_linux | — | Upgrade libtiff-toolsUpgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-debuginfoNo solution existsUpgrade libtiff-develUpgrade libtiff-debugsource | May 15, 2023 | May 9, 2023 |
| Ubuntu | — | Upgrade tiff (Ubuntu Pro)Upgrade tiff | Nov 19, 2024 | May 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub