CVE-2023-0795

CVSS V2 None CVSS V3 None
Description
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
Overview
  • CVE ID
  • CVE-2023-0795
  • Assigner
  • cve@gitlab.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-02-13T23:15:11
  • Last Modified Date
  • 2023-03-16T16:15:11
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* 1 OR 4.4.0
History
Created Old Value New Value Data Type Notes
2023-04-17 07:39:44 Added to TrackCVE
2023-04-17 07:39:45 Weakness Enumeration new