Rapid7

vulnerability

Ubuntu: (Multiple Advisories) (CVE-2023-3316): LibTIFF vulnerabilities

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
Jun 19, 2023
Added
Jul 14, 2023
Modified
Apr 16, 2026

Description

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

Solutions

ubuntu-pro-upgrade-libtiff-toolsubuntu-pro-upgrade-libtiff5ubuntu-upgrade-libtiff-toolsubuntu-upgrade-libtiff5
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

    Rapid7 Vulnerability Database