Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-41175
HistoryOct 05, 2023 - 12:00 a.m.

CVE-2023-41175

2023-10-0500:00:00
ubuntu.com
ubuntu.com
22
libtiff
integer overflows
remote code execution
crafted tiff image
heap-based buffer overflow
denial of service
vulnerability
remote attackers
raw2tiff.c

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.2%

A vulnerability was found in libtiff due to multiple potential integer
overflows in raw2tiff.c. This flaw allows remote attackers to cause a
denial of service or possibly execute an arbitrary code via a crafted tiff
image, which triggers a heap-based buffer overflow.

Bugs

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.2%