CVE-2023-3576

2023-10-0400:00:00

ubuntu.com

libtiff

tiffcrop

memory leak

denial of service

0.0004 Low

EPSS

Percentile

9.8%

JSON

A memory leak flaw was found in Libtiff’s tiffcrop utility. This issue
occurs when tiffcrop operates on a TIFF image file, allowing an attacker to
pass a crafted TIFF image file to tiffcrop utility, which causes this
memory leak issue, resulting an application crash, eventually leading to a
denial of service.

Notes

Author	Note
	Priority reason: Only a memory leak in the tiffcrop command-line tool
mdeslaur	memory leak in tiffcrop command line tool

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtiff< 4.0.9-5ubuntu0.10+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchtiff< 4.1.0+git191117-2ubuntu0.20.04.11UNKNOWN
ubuntu22.04noarchtiff< 4.3.0-6ubuntu0.7UNKNOWN
ubuntu14.04noarchtiff< 4.0.3-7ubuntu0.11+esm11) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchtiff< 4.0.6-1ubuntu0.8+esm14) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	tiff	< 4.0.9-5ubuntu0.10+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	20.04	noarch	tiff	< 4.1.0+git191117-2ubuntu0.20.04.11	UNKNOWN
ubuntu	22.04	noarch	tiff	< 4.3.0-6ubuntu0.7	UNKNOWN
ubuntu	14.04	noarch	tiff	< 4.0.3-7ubuntu0.11+esm11) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	tiff	< 4.0.6-1ubuntu0.8+esm14) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN