Lucene search
HistoryJun 29, 2023 - 8:15 p.m.
CVE-2023-25433
cve-2023-25433
buffer overflow
libtiff
tiffcrop.c
heap-buffer-overflow
segv
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
19.5%
libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.
Affected configurations
Node
libtifflibtiffMatch4.5.0-
Related
cbl_mariner
cbl_mariner
CVE-2023-25433 affecting package libtiff for versions less than 4.5.1-1
2023-08-03 02:51:21
CVE-2023-25433 affecting package libtiff 4.5.0-3
2023-07-28 23:16:55
prion
prion
Heap overflow
2023-06-29 20:15:00
cvelist
cvelist
CVE-2023-25433
2023-06-29 00:00:00
ubuntucve
ubuntucve
CVE-2023-25433
2023-06-29 00:00:00
veracode
veracode
Heap-based Buffer Overflow
2023-07-11 13:11:55
osv
osv
CVE-2023-25433
2023-06-29 20:15:09
tiff vulnerabilities
2023-07-13 17:32:04
Moderate: libtiff security update
2024-08-21 14:52:31
cve
cve
CVE-2023-25433
2023-06-29 20:15:09
redhatcve
redhatcve
CVE-2023-25433
2023-07-10 15:20:56
debiancve
debiancve
CVE-2023-25433
2023-06-29 20:15:09
amazon
amazon
Medium: libtiff
2023-09-27 22:48:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1985)
2024-07-19 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1939)
2024-07-16 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1966)
2024-07-16 00:00:00
nessus
nessus
EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-1571)
2024-05-09 00:00:00
EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-1593)
2024-05-09 00:00:00
EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2024-2003)
2024-07-18 00:00:00
cloudfoundry
cloudfoundry
USN-6229-1: LibTIFF vulnerabilities | Cloud Foundry
2023-08-10 00:00:00
redhat
redhat
rocky
rocky
libtiff security update
2024-08-21 14:52:31
almalinux
almalinux
Moderate: libtiff security update
2024-08-07 00:00:00
oraclelinux
oraclelinux
libtiff security update
2024-08-07 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0607
2023-07-04 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0044
2023-07-05 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2023-07-13 00:00:00
LibTIFF vulnerabilities
2023-08-15 00:00:00
mageia
mageia
Updated libtiff packages fix security vulnerability
2023-09-11 16:07:54
debian
debian
[SECURITY] [DLA 3513-1] tiff security update
2023-07-31 23:56:20
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Datacap
2024-06-03 19:44:41
hp
hp
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
19.5%
Related for NVD:CVE-2023-25433