A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff | May 15, 2023 | May 9, 2023 |
| Amazon_linux_2023 | — | Upgrade libtiffUpgrade libtiff-debuginfoUpgrade libtiff-staticUpgrade libtiff-toolsUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoUpgrade libtiff-devel | Feb 17, 2025 | Apr 17, 2023 |
| Centos_linux | — | Upgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiff-debuginfo | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 19, 2023 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiff-toolsUpgrade libtiff | May 21, 2024 | Apr 17, 2023 |
| Redhat_linux | — | Upgrade libtiff-debugsourceUpgrade libtiff-debuginfoUpgrade libtiff-develNo solution existsUpgrade libtiff-tools-debuginfoUpgrade libtiffUpgrade libtiff-tools | May 15, 2023 | May 9, 2023 |
| Ubuntu | — | Upgrade tiffUpgrade tiff (Ubuntu Pro) | Nov 19, 2024 | May 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub