CVE-2023-26965

Опубликовано: 14 июн. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

Ссылки

https://gitlab.com/libtiff/libtiff/-/merge_requests/472
Exploit
Issue Tracking
Patch
https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
https://security.netapp.com/advisory/ntap-20230706-0009/
https://gitlab.com/libtiff/libtiff/-/merge_requests/472
Exploit
Issue Tracking
Patch
https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
https://security.netapp.com/advisory/ntap-20230706-0009/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

Версия до 4.5.0 (включая)

EPSS

Процентиль: 0%

0.00008

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2023-26965

CVSS3: 5.5

ubuntu

около 2 лет назад

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

CVE-2023-26965

CVSS3: 5.5

redhat

около 2 лет назад

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

CVE-2023-26965

CVSS3: 5.5

msrc

около 2 лет назад

Описание отсутствует

CVE-2023-26965

CVSS3: 5.5

debian

около 2 лет назад

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-ba ...

GHSA-w5rm-7jx3-m7m4

CVSS3: 8.8

github

около 2 лет назад

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

EPSS

Процентиль: 0%

0.00008

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787