Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2731
HistoryMay 17, 2023 - 10:15 p.m.

Null pointer dereference

2023-05-1722:15:00
PRIOn knowledge base
www.prio-n.com
4
libtiff
lzwdecode
specific input
program crash
denial of service
tiff format

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%

A NULL pointer dereference flaw was found in Libtiff’s LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.

CPENameOperatorVersion
fedoraeq38
libtifflt4.5.0
enterprise_linuxeq9.0