An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-compat-libtiff3amazon-linux-ami-2-upgrade-compat-libtiff3-debuginfoamazon-linux-ami-2-upgrade-libtiffamazon-linux-ami-2-upgrade-libtiff-debuginfoamazon-linux-ami-2-upgrade-libtiff-develamazon-linux-ami-2-upgrade-libtiff-staticamazon-linux-ami-2-upgrade-libtiff-tools | Dec 5, 2023 | Nov 24, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libtiff | Feb 6, 2024 | Nov 24, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libtiffamazon-linux-2023-upgrade-libtiff-debuginfoamazon-linux-2023-upgrade-libtiff-debugsourceamazon-linux-2023-upgrade-libtiff-develamazon-linux-2023-upgrade-libtiff-staticamazon-linux-2023-upgrade-libtiff-toolsamazon-linux-2023-upgrade-libtiff-tools-debuginfo | Feb 17, 2025 | Nov 2, 2023 | |
| Apple Osx Imageio | apple-osx-upgrade-latest | Jul 31, 2024 | Nov 24, 2023 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Nov 24, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libtiff | Jan 10, 2024 | Nov 24, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libtiff | Jan 29, 2024 | Nov 24, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libtiff | Feb 12, 2024 | Nov 24, 2023 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Nov 24, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libtiff-toolsubuntu-pro-upgrade-libtiff5ubuntu-upgrade-libtiff-toolsubuntu-upgrade-libtiff5ubuntu-upgrade-libtiff6 | Feb 21, 2024 | Nov 24, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub