CVE-2023-6277

CVSS V2 None CVSS V3 None

Description

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

Overview

CVE ID
CVE-2023-6277

Assigner
redhat

Vulnerability Status
PUBLISHED

Published Version
2023-11-24T18:20:16.683Z

Last Modified Date
2024-04-25T15:56:01.503Z

Weakness Enumerations

CWE	URL
CWE-400	http://cwe.mitre.org/data/definitions/400.html

References

Reference URL	Reference Tags
https://access.redhat.com/security/cve/CVE-2023-6277	vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2251311	issue-tracking x_refsource_REDHAT
https://gitlab.com/libtiff/libtiff/-/issues/614
https://gitlab.com/libtiff/libtiff/-/merge_requests/545
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJIN6DTSL3VODZUGWEUXLEL5DR53EZMV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y7ZGN2MZXJ6E57W3L4YBM3ZPAU3T7T5C/
https://security.netapp.com/advisory/ntap-20240119-0002/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-6277
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6277

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 06:28:16				Added to TrackCVE