CVE-2023-0801

🗓️ 13 Feb 2023 23:12:15Reported by GitLabType

LibTIFF 4.4.0 has an out-of-bounds write allowing attackers to cause a denial-of-service via a crafted tiff file

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 116
Cvelist	CVE-2023-0801	13 Feb 202300:00	–	cvelist
CNVD	LibTIFF out-of-bounds write vulnerability (CNVD-2023-15758)	15 Feb 202300:00	–	cnvd
Tenable Nessus	CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0801)	20 Mar 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-0801	5 Mar 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libtiff (ALSA-2023:5353)	26 Sep 202300:00	–	nessus
Tenable Nessus	Rocky Linux 8 : libtiff (RLSA-2023:5353)	5 Oct 202300:00	–	nessus
Tenable Nessus	CentOS 8 : libtiff (CESA-2023:5353)	8 Feb 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : libtiff (ELSA-2023-5353)	26 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libtiff (ALAS-2023-1829)	25 Sep 202300:00	–	nessus
Tenable Nessus	RHEL 8 : libtiff (RHSA-2023:5353)	26 Sep 202300:00	–	nessus

Nvd

Vulners

Node

libtiff libtiffRange≤4.4.0

[
  {
    "vendor": "libtiff",
    "product": "libtiff",
    "versions": [
      {
        "version": "<=4.4.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json
debian	www.debian.org/security/2023/dsa-5361
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00026.html
security	www.security.netapp.com/advisory/ntap-20230316-0002/
gitlab	www.gitlab.com/libtiff/libtiff/-/issues/498
security	www.security.gentoo.org/glsa/202305-31
gitlab	www.gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 23:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.5 - 6.8

EPSS0.00022

SSVC

CWE-787