Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6644-2
HistoryFeb 27, 2024 - 12:00 a.m.

LibTIFF vulnerabilities

2024-02-2700:00:00
ubuntu.com
45
libtiff
ubuntu
vulnerabilities
tiff
denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

47.0%

JSON

Releases

  • Ubuntu 22.04 LTS

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

USN-6644-1 fixed vulnerabilities in LibTIFF.
This update provides the corresponding updates for Ubuntu 22.04 LTS.

Original advisory details:

It was discovered that LibTIFF incorrectly handled certain files. If
a user were tricked into opening a specially crafted file, an attacker
could possibly use this issue to cause the application to crash, resulting
in a denial of service. (CVE-2023-52356)

It was discovered that LibTIFF incorrectly handled certain image files
with the tiffcp utility. If a user were tricked into opening a specially
crafted image file, an attacker could possibly use this issue to cause
tiffcp to crash, resulting in a denial of service. (CVE-2023-6228)

It was discovered that LibTIFF incorrectly handled certain files. If
a user were tricked into opening a specially crafted file, an attacker
could possibly use this issue to cause the application to consume
resources, resulting in a denial of service. (CVE-2023-6277)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchlibtiff-tools< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff-dev< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff-doc< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff-opengl< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff-opengl-dbgsym< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff-tools-dbgsym< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff5< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff5-dbgsym< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiff5-dev< 4.3.0-6ubuntu0.8UNKNOWN
Ubuntu22.04noarchlibtiffxx5< 4.3.0-6ubuntu0.8UNKNOWN
Rows per page:
1-10 of 111

Related

osv 10
openvas 23
ubuntu 1
nessus 46
cloudfoundry 1
almalinux 2
oraclelinux 2
redhat 8
rocky 1
mageia 2
cvelist 3
redhatcve 3
debiancve 3
wolfi 2
prion 3
ibm 1
cgr 2
veracode 3
cve 3
cbl_mariner 4
ubuntucve 3
redos 3
nvd 3
cnvd 1
amazon 3
fedora 2
debian 1
photon 4
apple 8
hp 1
osv
osv
tiff vulnerabilities
2024-02-19 20:07:28
tiff vulnerabilities
2024-02-27 18:31:07
Moderate: libtiff security update
2024-08-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6644-2)
2024-02-28 00:00:00
Ubuntu: Security Advisory (USN-6644-1)
2024-02-20 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1471)
2024-03-21 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2024-02-19 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 23.10 : LibTIFF vulnerabilities (USN-6644-1)
2024-02-19 00:00:00
Ubuntu 22.04 LTS : LibTIFF vulnerabilities (USN-6644-2)
2024-02-27 00:00:00
EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2024-1123)
2024-01-26 00:00:00
cloudfoundry
cloudfoundry
USN-6644-2: LibTIFF vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
almalinux
almalinux
Moderate: libtiff security update
2024-08-07 00:00:00
Moderate: libtiff security update
2024-04-30 00:00:00
oraclelinux
oraclelinux
libtiff security update
2024-08-07 00:00:00
libtiff security update
2024-05-02 00:00:00
redhat
redhat
(RHSA-2024:5079) Moderate: libtiff security update
2024-08-07 10:56:05
(RHSA-2024:2289) Moderate: libtiff security update
2024-04-30 06:15:17
(RHSA-2024:3790) Moderate: OpenShift API for Data Protection (OADP) 1.3.2 security and bug fix update
2024-06-11 02:31:21
rocky
rocky
libtiff security update
2024-08-21 14:52:31
mageia
mageia
Updated libtiff packages fix security vulnerability
2024-03-12 03:30:17
Updated libtiff packages fix security vulnerability
2024-05-09 05:40:29
cvelist
cvelist
CVE-2023-52356 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
2024-01-25 20:03:40
CVE-2023-6228 Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
2023-12-18 13:43:08
CVE-2023-6277 Libtiff: out-of-memory in tiffopen via a craft file
2023-11-24 18:20:16
redhatcve
redhatcve
CVE-2023-52356
2024-01-25 20:03:50
CVE-2023-6228
2023-11-21 05:50:40
CVE-2023-6277
2023-11-24 08:51:34
debiancve
debiancve
CVE-2023-52356
2024-01-25 20:15:39
CVE-2023-6228
2023-12-18 14:15:11
CVE-2023-6277
2023-11-24 19:15:07
wolfi
wolfi
CVE-2023-6228 vulnerabilities
2024-09-19 09:11:50
CVE-2023-6277 vulnerabilities
2024-09-19 09:11:50
prion
prion
Heap overflow
2023-12-18 14:15:00
Heap overflow
2024-01-25 20:15:00
Memory corruption
2023-11-24 19:15:00
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF
2024-06-10 17:50:06
cgr
cgr
CVE-2023-6228 vulnerabilities
2024-05-19 03:07:16
CVE-2023-6277 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Denial Of Service (DoS)
2024-01-29 06:23:09
Denial Of Service
2023-11-29 13:16:24
Denial Of Service (DoS)
2023-11-27 06:51:44
cve
cve
CVE-2023-6228
2023-12-18 14:15:11
CVE-2023-52356
2024-01-25 20:15:39
CVE-2023-6277
2023-11-24 19:15:07
cbl_mariner
cbl_mariner
CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2
2024-08-14 20:43:58
CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2
2024-03-10 14:35:46
CVE-2023-6277 affecting package libtiff for versions less than 4.6.0-3
2024-08-14 20:43:58
ubuntucve
ubuntucve
CVE-2023-52356
2024-01-25 00:00:00
CVE-2023-6228
2023-12-18 00:00:00
CVE-2023-6277
2023-11-24 00:00:00
redos
redos
ROS-20240412-07
2024-04-12 00:00:00
ROS-20240409-08
2024-04-09 00:00:00
ROS-20240328-14
2024-03-28 00:00:00
nvd
nvd
CVE-2023-52356
2024-01-25 20:15:39
CVE-2023-6228
2023-12-18 14:15:11
CVE-2023-6277
2023-11-24 19:15:07
cnvd
cnvd
Unspecified vulnerability in LibTIFF (CNVD-2023-9917445)
2023-12-20 00:00:00
amazon
amazon
Important: libtiff
2024-02-01 19:33:00
Important: libtiff
2023-11-29 22:19:00
Important: compat-libtiff3
2023-11-29 22:19:00
fedora
fedora
[SECURITY] Fedora 38 Update: tkimg-1.4.16-1.fc38
2024-01-14 00:47:34
[SECURITY] Fedora 39 Update: tkimg-1.4.16-1.fc39
2024-01-14 01:00:15
debian
debian
[SECURITY] [DLA 3758-1] tiff security update
2024-03-11 12:38:16
photon
photon
Moderate Photon OS Security Update - PHSA-2024-3.0-0708
2024-01-05 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0558
2024-01-31 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0719
2024-01-31 00:00:00
apple
apple
About the security content of tvOS 17.6
2024-07-29 00:00:00
About the security content of visionOS 1.3
2024-07-29 00:00:00
About the security content of iOS 16.7.9 and iPadOS 16.7.9
2024-07-29 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

47.0%

JSON
Related for USN-6644-2
osv10openvas23ubuntu1nessus46cloudfoundry1almalinux2oraclelinux2redhat8rocky1mageia2cvelist3redhatcve3debiancve3wolfi2prion3ibm1cgr2veracode3cve3cbl_mariner4ubuntucve3redos3nvd3cnvd1amazon3fedora2debian1photon4apple8hp1