Veracode Vulnerability DatabaseVERACODE:39372Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
12.2%
libtiff.so is vulnerable to Denial Of Service (DoS). The vulnerability exists due to an out of bounds read in tiffcrop.c which allows an attacker to send crafted tiff files causing an application crash.
References
github.com/advisories/GHSA-cjrm-898p-cxjr
gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0795.json
gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68
gitlab.com/libtiff/libtiff/-/issues/493
lists.debian.org/debian-lts-announce/2023/02/msg00026.html
security.gentoo.org/glsa/202305-31
security.netapp.com/advisory/ntap-20230316-0003/
www.debian.org/security/2023/dsa-5361
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
12.2%