CVE-2023-0796

🗓️ 13 Feb 2023 23:11:15Reported by GitLabType

LibTIFF 4.4.0 out-of-bounds read in tiffcrop, causing denial-of-servic

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 98
RedhatCVE	CVE-2023-0796	15 Feb 202319:29	–	redhatcve
Veracode	Denial Of Service (DoS)	20 Feb 202305:32	–	veracode
AlpineLinux	CVE-2023-0796	13 Feb 202323:15	–	alpinelinux
CBLMariner	CVE-2023-0796 affecting package libtiff 4.5.0-1	9 Mar 202319:51	–	cbl_mariner
CBLMariner	CVE-2023-0796 affecting package libtiff for versions less than 4.4.0-8	9 Mar 202300:24	–	cbl_mariner
CNVD	LibTIFF tiffcrop.c:3592 Buffer Overflow Vulnerability	15 Feb 202300:00	–	cnvd
OSV	CVE-2023-0796	13 Feb 202323:15	–	osv
OSV	tiff vulnerabilities	6 Mar 202317:07	–	osv
OSV	OPENSUSE-SU-2024:12730-1 libtiff-devel-32bit-4.5.0-3.1 on GA media	15 Jun 202400:00	–	osv
OSV	tiff - security update	24 Feb 202300:00	–	osv

Nvd

Vulners

Node

libtiff libtiffRange≤4.4.0

[
  {
    "vendor": "libtiff",
    "product": "libtiff",
    "versions": [
      {
        "version": "<=4.4.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0796.json
debian	www.debian.org/security/2023/dsa-5361
gitlab	www.gitlab.com/libtiff/libtiff/-/issues/499
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00026.html
security	www.security.gentoo.org/glsa/202305-31
security	www.security.netapp.com/advisory/ntap-20230316-0003/
gitlab	www.gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 23:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.5 - 6.8

EPSS0.00011

SSVC

CWE-125