CVE-2023-0800

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0797

LibTIFF 4.4.0 contains an out-of-bounds read in tiffcrop (libtiff/tif_unix.c:368) invoked by tools/tiffcrop.c, allowing denial-of-service via a crafted TIFF file. The CVE is CVE-2023-0797. The connected sources confirm the vulnerability and note that a fix is available in commit afaabc3e; systems...

CVE-2023-0795

Summary (CVE-2023-0795, LibTIFF): LibTIFF 4.4.0 is affected by an out-of-bounds read in tiffcrop (tools/tiffcrop.c:3488; other lines cited in connected advisories), enabling denial-of-service via crafted TIFF files. The root cause is an out-of-bounds read/write in tiffcrop-related code paths, lea...

CVE-2023-0803

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0799

LibTIFF 4.4.0 is affected by CVE-2023-0799 due to an out-of-bounds read in tiffcrop (tools/tiffcrop.c:3701), which can cause a denial-of-service when processing a crafted TIFF file. The vulnerability is associated with the tiffcrop utility, and the fixed state is available via commit afaabc3e for...

CVE-2023-0796: Out-of-bounds Read

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0804: Out-of-bounds Write

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0796

CVE-2023-0796 affects LibTIFF 4.4.0, with an out-of-bounds read in tiffcrop (tools/tiffcrop.c:3592) that can cause a denial-of-service when processing crafted TIFF images. The issue is associated with LibTIFF’s tiffcrop handling and is addressed for sources builds by commit afaabc3e; advisories a...

CVE-2023-0802

CVE-2023-0802 affects LibTIFF 4.4.0 with an out-of-bounds write in tiffcrop (tools/tiffcrop.c:3724). The issue is documented across multiple advisories (ALAS, ALAS2, Astra Linux) and Cloud Foundry references, confirming a libtiff tiffcrop flaw that can lead to denial-of-service via crafted TIFF f...

CVE-2023-0798: Out-of-bounds Read

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0795: Out-of-bounds Read

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0803

CVE-2023-0803 affects LibTIFF 4.4.0 and its tiffcrop tool. The vulnerability is an out-of-bounds write in tools/tiffcrop.c (line 3516 in the initial description; other sources reference related offsets) that can cause a denial-of-service when processing crafted TIFF files. The root cause is an im...

CVE-2023-0800

CVE-2023-0800 affects LibTIFF 4.4.0. There is an out-of-bounds write in tiffcrop.c at line 3502, exploitable via a crafted TIFF file to cause a denial-of-service. The fix is available in the commit 33aee127 for those building LibTIFF from source. Connected advisories consistently reference this C...

CVE-2023-0804

CVE-2023-0804 affects LibTIFF 4.4.0 with an out-of-bounds write in tiffcrop (tools/tiffcrop.c), enabling denial-of-service via a crafted TIFF. The issue is tied to the tiffcrop implementation and is addressed by the patch committed as 33aee1275d9d1384791d2206776eb8152d397f00. Connected sources co...

CVE-2023-0798

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0798

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0801

CVE-2023-0801 affects LibTIFF 4.4.0, involving an out-of-bounds write in tiffcrop via _TIFFmemcpy() invoked from tools/tiffcrop.c and libtiff/tif_unix.c:368. The issue is triggered during TIFF processing by crafted files, enabling denial-of-service. The problem is fixed in the upstream commit 33a...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A buffer overflow vulnerability exists in LibTIFF version 4.4.0, which stems from a boundary error in tiffcrop at tools/tiffcrop.c:3592 when...

CVE-2023-0797

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tifunix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0804

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...