Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-2908

Опубликовано: 30 июн. 2023
Источник: ubuntu
Приоритет: medium
CVSS3: 5.5

Описание

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

4.5.1+git230720-1ubuntu1
esm-infra-legacy/trusty

released

4.0.3-7ubuntu0.11+esm9
esm-infra/bionic

released

4.0.9-5ubuntu0.10+esm2
esm-infra/focal

released

4.1.0+git191117-2ubuntu0.20.04.9
esm-infra/xenial

released

4.0.6-1ubuntu0.8+esm12
focal

released

4.1.0+git191117-2ubuntu0.20.04.9
jammy

released

4.3.0-6ubuntu0.5
kinetic

ignored

end of life, was needs-triage
lunar

released

4.5.0-5ubuntu1.1

Показывать по

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
больше 2 лет назад

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.

CVSS3: 5.5
nvd
больше 2 лет назад

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.

CVSS3: 5.5
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 5.5
debian
больше 2 лет назад

A null pointer dereference issue was found in Libtiff's tif_dir.c file ...

CVSS3: 5.5
github
больше 2 лет назад

A null pointer dereference issue was discovered in Libtiff's tif_dir.c file. This flaw allows an attacker to pass a crafted TIFF image file to the tiffcp utility, which triggers runtime error, causing an undefined behavior, resulting in an application crash, eventually leading to a denial of service.

5.5 Medium

CVSS3