vulnerability

Ubuntu: USN-6827-1 (CVE-2023-3164): LibTIFF vulnerability

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
11/02/2023
Added
07/01/2024
Modified
01/28/2025

Description

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.

Solution(s)

ubuntu-pro-upgrade-libtiff-toolsubuntu-pro-upgrade-libtiff5ubuntu-pro-upgrade-libtiff6
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.