Lucene search
Redhat.comRH:CVE-2023-0798HistoryFeb 15, 2023 - 7:30 p.m.
CVE-2023-0798
2023-02-1519:30:18
redhat.com
access.redhat.com
24
tiffcrop
libtiff package
out-of-bounds read
CVSS3
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS
0.001
Percentile
30.3%
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractContigSamplesShifted8bits function in tools/tiffcrop.c, resulting in a Denial of Service and limited information disclosure.
Related
debiancve
debiancve
CVE-2023-0798
2023-02-13 23:15:12
alpinelinux
alpinelinux
CVE-2023-0798
2023-02-13 23:15:12
prion
prion
Out-of-bounds
2023-02-13 23:15:00
cbl_mariner
cbl_mariner
CVE-2023-0798 affecting package libtiff 4.5.0-1
2023-03-09 19:51:01
CVE-2023-0798 affecting package libtiff for versions less than 4.4.0-8
2023-03-09 00:24:42
nessus
nessus
CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0798)
2023-03-20 00:00:00
Amazon Linux AMI : libtiff (ALAS-2023-1830)
2023-09-25 00:00:00
ubuntucve
ubuntucve
CVE-2023-0798
2023-02-13 00:00:00
osv
osv
CVE-2023-0798
2023-02-13 23:15:12
tiff - security update
2023-02-21 00:00:00
tiff vulnerabilities
2023-03-06 17:07:54
cvelist
cvelist
CVE-2023-0798
2023-02-13 00:00:00
cve
cve
CVE-2023-0798
2023-02-13 23:15:12
veracode
veracode
Denial Of Service (DoS)
2023-02-20 05:26:57
cnvd
cnvd
LibTIFF out-of-bounds read vulnerability (CNVD-2023-15759)
2023-02-15 00:00:00
nvd
nvd
CVE-2023-0798
2023-02-13 23:15:12
amazon
amazon
Medium: libtiff
2023-09-13 23:15:00
Medium: libtiff
2023-08-31 22:29:00
Medium: libtiff
2023-08-31 22:29:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2023-03-06 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1979)
2023-05-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2321-1)
2023-05-31 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2477)
2023-07-31 00:00:00
debian
debian
[SECURITY] [DSA 5361-1] tiff security update
2023-02-24 08:12:14
[SECURITY] [DLA 3333-1] tiff security update
2023-02-21 22:59:14
mageia
mageia
Updated libtiff packages fix security vulnerability
2023-03-02 00:14:31
cloudfoundry
cloudfoundry
USN-5923-1: LibTIFF vulnerabilities | Cloud Foundry
2023-03-23 00:00:00
gentoo
gentoo
LibTIFF: Multiple Vulnerabilities
2023-05-30 00:00:00
almalinux
almalinux
Moderate: libtiff security update
2023-06-21 00:00:00
oraclelinux
oraclelinux
libtiff security update
2023-06-21 00:00:00
rocky
rocky
libtiff security update
2023-08-31 16:55:40
redhat
redhat
(RHSA-2023:3711) Moderate: libtiff security update
2023-06-21 13:52:06
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0605
2023-06-28 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0018
2023-06-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0417
2023-06-30 00:00:00
CVSS3
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS
0.001
Percentile
30.3%
Related for RH:CVE-2023-0798