CVE-2023-6277

2023-11-2418:20:16

Debian Security Bug Tracker

security-tracker.debian.org

libtiff tiffopen craft input unix remote attacker

0.002 Low

EPSS

Percentile

54.5%

JSON

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

OSVersionArchitecturePackageVersionFilename
Debian12alltiff<= 4.5.0-6+deb12u1tiff_4.5.0-6+deb12u1_all.deb
Debian11alltiff<= 4.2.0-1+deb11u5tiff_4.2.0-1+deb11u5_all.deb
Debian10alltiff<= 4.1.0+git191117-2~deb10u4tiff_4.1.0+git191117-2~deb10u4_all.deb
Debian999alltiff< 4.5.1+git230720-2tiff_4.5.1+git230720-2_all.deb
Debian13alltiff< 4.5.1+git230720-2tiff_4.5.1+git230720-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	tiff	<= 4.5.0-6+deb12u1	tiff_4.5.0-6+deb12u1_all.deb
Debian	11	all	tiff	<= 4.2.0-1+deb11u5	tiff_4.2.0-1+deb11u5_all.deb
Debian	10	all	tiff	<= 4.1.0+git191117-2~deb10u4	tiff_4.1.0+git191117-2~deb10u4_all.deb
Debian	999	all	tiff	< 4.5.1+git230720-2	tiff_4.5.1+git230720-2_all.deb
Debian	13	all	tiff	< 4.5.1+git230720-2	tiff_4.5.1+git230720-2_all.deb