Lucene search

CVE-2023-0804

🗓️ 13 Feb 2023 23:12:15Reported by GitLabType

CVE-2023-0804 LibTIFF 4.4.0 out-of-bounds write in tiffcro

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 125
Tenable Nessus	CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0804)	20 Mar 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-0804	5 Mar 202500:00	–	nessus
Tenable Nessus	Fedora 38 : libtiff (2023-8daf1023c7)	1 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libtiff (ALSA-2023:5353)	26 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-230)	28 Jun 202300:00	–	nessus
Tenable Nessus	RHEL 8 : libtiff (RHSA-2023:5353)	26 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libtiff (ALAS-2023-1829)	25 Sep 202300:00	–	nessus
Tenable Nessus	CentOS 8 : libtiff (CESA-2023:5353)	8 Feb 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : libtiff (ELSA-2023-5353)	26 Sep 202300:00	–	nessus
Tenable Nessus	Rocky Linux 8 : libtiff (RLSA-2023:5353)	5 Oct 202300:00	–	nessus

Nvd

Vulners

Node

libtiff libtiffRange≤4.4.0

[
  {
    "vendor": "libtiff",
    "product": "libtiff",
    "versions": [
      {
        "version": "<=4.4.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/libtiff/libtiff/-/issues/497
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00026.html
security	www.security.netapp.com/advisory/ntap-20230324-0009/
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0804.json
debian	www.debian.org/security/2023/dsa-5361
security	www.security.gentoo.org/glsa/202305-31
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBF3UUFSB6NB3NFTQSKOOIZGXJP3T34Z/
gitlab	www.gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 23:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.5 - 6.8

EPSS0.00016

SSVC

CWE-787