CVE-2023-30775

Опубликовано: 19 мая 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

Ссылки

https://access.redhat.com/security/cve/CVE-2023-30775
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2187141
Issue Tracking
Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/464
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230703-0002/
https://access.redhat.com/security/cve/CVE-2023-30775
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2187141
Issue Tracking
Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/464
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230703-0002/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libtiff:libtiff:4.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00053

Низкий

5.5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-119

CWE-787

Связанные уязвимости

CVE-2023-30775

CVSS3: 5.5

ubuntu

около 2 лет назад

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

CVE-2023-30775

CVSS3: 6.2

redhat

около 2 лет назад

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

CVE-2023-30775

CVSS3: 5.5

debian

около 2 лет назад

A vulnerability was found in the libtiff library. This security flaw c ...

GHSA-jqmx-w3fp-9j6j

CVSS3: 5.5

github

около 2 лет назад

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

BDU:2023-03633

CVSS3: 6.2

fstec

около 2 лет назад

Уязвимость функции extractContigSamples32bits() (tiffcrop.c) библиотеки LibTIFF, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 17%

0.00053

Низкий

5.5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-119

CWE-787