Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-52355

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libtiff

Default version status: unaffected

  • 0 to < 4.6.0affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:4.6.0-8.el10_2.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Default version status: affected

  • 0:4.6.0-6.el10_0.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:4.4.0-15.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support

Default version status: affected

  • 0:4.4.0-13.el9_6.5 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1765379088 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1765379049 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1764871796 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1772160593 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1772160625 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 2.4.0-1763656152 to < *unaffected

Red Hat Red Hat OpenShift AI 3.0

Default version status: affected

  • 1790276886 to < *unaffected

Red Hat Red Hat OpenShift AI 3.0

Default version status: affected

  • 1790276884 to < *unaffected

Red Hat Red Hat OpenShift AI 3.0

Default version status: affected

  • 1790277045 to < *unaffected

Red Hat Red Hat OpenShift AI 3.0

Default version status: affected

  • 1790276889 to < *unaffected

Red Hat Red Hat OpenShift AI 3.0

Default version status: affected

  • 1790276974 to < *unaffected

Red Hat Red Hat OpenShift AI 3.2

Default version status: affected

  • 1790703497 to < *unaffected

Red Hat Red Hat OpenShift AI 3.2

Default version status: affected

  • 1790703506 to < *unaffected

Red Hat Red Hat OpenShift AI 3.2

Default version status: affected

  • 1790703590 to < *unaffected

Red Hat Red Hat OpenShift AI 3.2

Default version status: affected

  • 1790703568 to < *unaffected

Red Hat Red Hat OpenShift AI 3.2

Default version status: affected

  • 1790703586 to < *unaffected

Red Hat Red Hat OpenShift AI 3.2

Default version status: affected

  • 1790703494 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1790703542 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

References