Lucene search
Veracode Vulnerability DatabaseVERACODE:40582HistoryMay 18, 2023 - 6:26 a.m.
Heap-based Buffer Overflow
2023-05-1806:26:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
libtiff vulnerability application crash buffer overflow
0.001 Low
EPSS
Percentile
23.3%
libtiff.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values which allows an attacker to cause a buffer overflow resulting in an application crash.
References
seclists.org/fulldisclosure/2023/Oct/24
access.redhat.com/security/cve/CVE-2023-30774
bugzilla.redhat.com/show_bug.cgi?id=2187139
gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246
gitlab.com/libtiff/libtiff/-/issues/463
security.netapp.com/advisory/ntap-20230703-0002/
support.apple.com/kb/HT213984
ubuntu.com/security/CVE-2023-30774
Related
debiancve
debiancve
CVE-2023-30774
2023-05-19 15:15:08
nessus
nessus
Amazon Linux AMI : libtiff (ALAS-2023-1847)
2023-10-06 00:00:00
Amazon Linux 2 : libtiff (ALAS-2023-2274)
2023-10-05 00:00:00
cvelist
cvelist
CVE-2023-30774
2023-05-19 00:00:00
amazon
amazon
Medium: libtiff
2023-09-27 22:15:00
Medium: libtiff
2023-09-27 22:48:00
cve
cve
CVE-2023-30774
2023-05-19 15:15:08
prion
prion
Heap overflow
2023-05-19 15:15:00
osv
osv
CVE-2023-30774
2023-05-19 15:15:08
Moderate: libtiff security update
2023-05-09 00:00:00
redhatcve
redhatcve
CVE-2023-30774
2023-04-17 05:30:41
nvd
nvd
CVE-2023-30774
2023-05-19 15:15:08
ubuntucve
ubuntucve
CVE-2023-30774
2023-05-19 00:00:00
redos
redos
ROS-20230621-02
2023-06-21 00:00:00
almalinux
almalinux
Moderate: libtiff security update
2023-05-09 00:00:00
oraclelinux
oraclelinux
libtiff security update
2023-05-15 00:00:00
redhat
redhat
(RHSA-2023:2340) Moderate: libtiff security update
2023-05-09 05:07:52
ibm
ibm
openvas
openvas
Apple Mac OS X Security Update (HT213984)
2023-10-27 00:00:00
apple
apple
About the security content of macOS Sonoma 14.1
2023-10-25 00:00:00