Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-3618

Опубликовано: 12 июл. 2023
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*
Версия до 4.5.1 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 39%
0.00171
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-120
CWE-120

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

CVSS3: 6.5
redhat
больше 2 лет назад

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

CVSS3: 6.5
debian
около 2 лет назад

A flaw was found in libtiff. A specially crafted tiff file can lead to ...

CVSS3: 6.5
redos
почти 2 года назад

Уязвимость Libtiff

CVSS3: 7.5
github
около 2 лет назад

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

EPSS

Процентиль: 39%
0.00171
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-120
CWE-120