Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6644-1
HistoryFeb 19, 2024 - 12:00 a.m.

LibTIFF vulnerabilities

2024-02-1900:00:00
ubuntu.com
21
ubuntu
libtiff
esm
tiff
denial of service
cve-2023-52356
cve-2023-6228
cve-2023-6277
tiffcp
image files
resource consumption
unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

It was discovered that LibTIFF incorrectly handled certain files. If
a user were tricked into opening a specially crafted file, an attacker
could possibly use this issue to cause the application to crash, resulting
in a denial of service. (CVE-2023-52356)

It was discovered that LibTIFF incorrectly handled certain image files
with the tiffcp utility. If a user were tricked into opening a specially
crafted image file, an attacker could possibly use this issue to cause
tiffcp to crash, resulting in a denial of service. (CVE-2023-6228)

It was discovered that LibTIFF incorrectly handled certain files. If
a user were tricked into opening a specially crafted file, an attacker
could possibly use this issue to cause the application to consume
resources, resulting in a denial of service. (CVE-2023-6277)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchlibtiff-tools< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff-dev< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff-doc< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff-opengl< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff-opengl-dbgsym< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff-tools-dbgsym< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff5-dev< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff6< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiff6-dbgsym< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibtiffxx6< 4.5.1+git230720-1ubuntu1.1UNKNOWN
Rows per page:
1-10 of 601

Related

osv 5
openvas 20
nessus 30
ubuntu 1
cloudfoundry 1
redhatcve 3
mageia 2
cvelist 3
debiancve 3
cve 3
ubuntucve 3
prion 3
cbl_mariner 1
redos 3
nvd 3
wolfi 2
veracode 3
cgr 2
ibm 1
cnvd 1
fedora 2
amazon 3
debian 1
photon 4
redhat 2
almalinux 1
oraclelinux 1
hp 1
osv
osv
tiff vulnerabilities
2024-02-19 20:07:28
tiff vulnerabilities
2024-02-27 18:31:07
CVE-2023-6228
2023-12-18 14:15:11
openvas
openvas
Ubuntu: Security Advisory (USN-6644-2)
2024-02-28 00:00:00
Ubuntu: Security Advisory (USN-6644-1)
2024-02-20 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1361)
2024-03-14 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 23.10 : LibTIFF vulnerabilities (USN-6644-1)
2024-02-19 00:00:00
Ubuntu 22.04 LTS : LibTIFF vulnerabilities (USN-6644-2)
2024-02-27 00:00:00
EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2024-1108)
2024-01-26 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2024-02-27 00:00:00
cloudfoundry
cloudfoundry
USN-6644-2: LibTIFF vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
redhatcve
redhatcve
CVE-2023-52356
2024-01-25 20:03:50
CVE-2023-6228
2023-11-21 05:50:40
CVE-2023-6277
2023-11-24 08:51:34
mageia
mageia
Updated libtiff packages fix security vulnerability
2024-03-12 03:30:17
Updated libtiff packages fix security vulnerability
2024-05-09 05:40:29
cvelist
cvelist
CVE-2023-52356 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
2024-01-25 20:03:40
CVE-2023-6228 Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
2023-12-18 13:43:08
CVE-2023-6277 Libtiff: out-of-memory in tiffopen via a craft file
2023-11-24 18:20:16
debiancve
debiancve
CVE-2023-52356
2024-01-25 20:15:39
CVE-2023-6228
2023-12-18 14:15:11
CVE-2023-6277
2023-11-24 19:15:07
cve
cve
CVE-2023-52356
2024-01-25 20:15:39
CVE-2023-6228
2023-12-18 14:15:11
CVE-2023-6277
2023-11-24 19:15:07
ubuntucve
ubuntucve
CVE-2023-52356
2024-01-25 00:00:00
CVE-2023-6228
2023-12-18 00:00:00
CVE-2023-6277
2023-11-24 00:00:00
prion
prion
Heap overflow
2024-01-25 20:15:00
Heap overflow
2023-12-18 14:15:00
Memory corruption
2023-11-24 19:15:00
cbl_mariner
cbl_mariner
CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2
2024-03-10 14:35:46
redos
redos
ROS-20240412-07
2024-04-12 00:00:00
ROS-20240409-08
2024-04-09 00:00:00
ROS-20240328-14
2024-03-28 00:00:00
nvd
nvd
CVE-2023-52356
2024-01-25 20:15:39
CVE-2023-6228
2023-12-18 14:15:11
CVE-2023-6277
2023-11-24 19:15:07
wolfi
wolfi
CVE-2023-6228 vulnerabilities
2024-06-20 09:08:19
CVE-2023-6277 vulnerabilities
2024-06-20 09:08:19
veracode
veracode
Denial Of Service (DoS)
2024-01-29 06:23:09
Denial Of Service
2023-11-29 13:16:24
Denial Of Service (DoS)
2023-11-27 06:51:44
cgr
cgr
CVE-2023-6228 vulnerabilities
2024-05-19 03:07:16
CVE-2023-6277 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF
2024-06-10 17:50:06
cnvd
cnvd
Unspecified vulnerability in LibTIFF (CNVD-2023-9917445)
2023-12-20 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: tkimg-1.4.16-1.fc38
2024-01-14 00:47:34
[SECURITY] Fedora 39 Update: tkimg-1.4.16-1.fc39
2024-01-14 01:00:15
amazon
amazon
Important: libtiff
2023-11-29 22:19:00
Important: libtiff
2024-02-01 19:33:00
Important: compat-libtiff3
2023-11-29 22:19:00
debian
debian
[SECURITY] [DLA 3758-1] tiff security update
2024-03-11 12:38:16
photon
photon
Moderate Photon OS Security Update - PHSA-2024-3.0-0708
2024-01-05 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0719
2024-01-31 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0558
2024-01-31 00:00:00
redhat
redhat
(RHSA-2024:2289) Moderate: libtiff security update
2024-04-30 06:15:17
(RHSA-2024:2932) Important: logging for Red Hat OpenShift security update
2024-05-23 07:05:57
almalinux
almalinux
Moderate: libtiff security update
2024-04-30 00:00:00
oraclelinux
oraclelinux
libtiff security update
2024-05-02 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

JSON
Related for USN-6644-1
osv5openvas20nessus30ubuntu1cloudfoundry1redhatcve3mageia2cvelist3debiancve3cve3ubuntucve3prion3cbl_mariner1redos3nvd3wolfi2veracode3cgr2ibm1cnvd1fedora2amazon3debian1photon4redhat2almalinux1oraclelinux1hp1