Lucene search
Veracode Vulnerability DatabaseVERACODE:40994HistoryJun 23, 2023 - 7:59 a.m.
Heap Based Buffer Overflow
2023-06-2307:59:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
libtiff vulnerability buffer overflow crafted input remote attacker
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.8%
libtiff.so is vulnerable to Heap Based Buffer Overflow. The vulnerability exists in extractContigSamplesBytes() of tiffcrop.c which allows a remote attacker to cause buffer overflows via a crafted input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libtiff.so | le | 5.8.0 | |
| libtiff.so | le | 5.8.0 |
Related
prion
prion
Buffer overflow
2023-06-14 20:15:00
cve
cve
CVE-2023-25434
2023-06-14 20:15:09
cbl_mariner
cbl_mariner
CVE-2023-25434 affecting package libtiff for versions less than 4.5.1-1
2023-08-03 02:51:21
CVE-2023-25434 affecting package libtiff 4.5.0-3
2023-07-28 23:16:55
osv
osv
CVE-2023-25434
2023-06-14 20:15:09
redhatcve
redhatcve
CVE-2023-25434
2023-06-28 09:17:12
cvelist
cvelist
CVE-2023-25434
2023-06-14 00:00:00
nvd
nvd
CVE-2023-25434
2023-06-14 20:15:09
debiancve
debiancve
CVE-2023-25434
2023-06-14 20:15:09
ubuntucve
ubuntucve
CVE-2023-25434
2023-06-14 00:00:00
CVE-2023-25435
2023-06-21 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0039
2023-06-27 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0605
2023-06-28 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0417
2023-06-30 00:00:00
nessus
nessus
RHEL 8 : libtiff (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : libtiff (Unpatched Vulnerability)
2024-06-03 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Datacap
2024-06-03 19:44:41
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.8%
Related for VERACODE:40994