Lucene search

K
nvd[email protected]NVD:CVE-2023-26966
HistoryJun 29, 2023 - 8:15 p.m.

CVE-2023-26966

2023-06-2920:15:09
CWE-120
web.nvd.nist.gov
6
cve-2023-26966
libtiff
buffer overflow

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6

Confidence

High

EPSS

0.001

Percentile

19.5%

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

Affected configurations

Nvd
Node
libtifflibtiffMatch4.5.0-
VendorProductVersionCPE
libtifflibtiff4.5.0cpe:2.3:a:libtiff:libtiff:4.5.0:-:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6

Confidence

High

EPSS

0.001

Percentile

19.5%