Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-52356

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libtiff

Default version status: unaffected

  • 0 to < 4.6.0affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:4.6.0-6.el10_1.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Default version status: affected

  • 0:4.6.0-6.el10_0.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.0.9-32.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:4.4.0-15.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support

Default version status: affected

  • 0:4.4.0-13.el9_6.3 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1765379088 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1765379049 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1764871796 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1780681984 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1772160593 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1772160625 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1775740563 to < *unaffected

Red Hat Red Hat AI Inference Server 3.3

Default version status: affected

  • 1778244546 to < *unaffected

Red Hat Red Hat AI Inference Server 3.3

Default version status: affected

  • 1775680192 to < *unaffected

Red Hat Red Hat AI Inference Server 3.3

Default version status: affected

  • 1775680262 to < *unaffected

Red Hat Red Hat AI Inference Server 3.3

Default version status: affected

  • 1775749857 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 2.4.0-1763656152 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

References