Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-52356

Опубликовано: 03 нояб. 2023
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Отчет

The flaw allows an attacker to potentially cause a denial of service attack by crashing a program, but the impact is minimal.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libtiffOut of support scope
Red Hat Enterprise Linux 7compat-libtiff3Out of support scope
Red Hat Enterprise Linux 7libtiffOut of support scope
Red Hat Enterprise Linux 8compat-libtiff3Will not fix
Red Hat Enterprise Linux 10libtiffFixedRHSA-2026:708108.04.2026
Red Hat Enterprise Linux 10.0 Extended Update SupportlibtiffFixedRHSA-2026:730409.04.2026
Red Hat Enterprise Linux 8libtiffFixedRHSA-2024:507907.08.2024
Red Hat Enterprise Linux 9libtiffFixedRHSA-2025:2080111.11.2025
Red Hat Enterprise Linux 9.6 Extended Update SupportlibtiffFixedRHSA-2026:595826.03.2026
Red Hat AI Inference Server 3.2rhaiis/vllm-cuda-rhel9FixedRHSA-2025:2307810.12.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=2251344libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

EPSS

Процентиль: 80%
0.02187
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

CVSS3: 7.5
nvd
больше 2 лет назад

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

CVSS3: 7.5
msrc
почти 2 года назад

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

CVSS3: 7.5
debian
больше 2 лет назад

A segment fault (SEGV) flaw was found in libtiff that could be trigger ...

suse-cvrf
больше 2 лет назад

Security update for tiff

EPSS

Процентиль: 80%
0.02187
Низкий

7.5 High

CVSS3