← Back

CVE-2023-52356

nvd nist
Published: Jan 25, 2024Modified: Oct 28, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected (28)

Show all products
Debian: Debian Linux · Apple: Ipados, Iphone Os, Macos, Tvos, Visionos, Watchos · Libtiff: Libtiff · Redhat: Ai Inference Server, Codeready Linux Builder, Codeready Linux Builder Eus, Discovery, Enterprise Linux, Enterprise Linux Eus
Debian
1 product
Debian Linux
Apple
6 products
Ipados
Iphone Os
Macos
Tvos
Visionos
Watchos
Libtiff
1 product
Libtiff
Redhat
6 products
Ai Inference Server
Codeready Linux Builder
Codeready Linux Builder Eus
Discovery
Enterprise Linux
Enterprise Linux Eus
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 11.0
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Ipados
version < 16.7.9
Ipados
17.0 ≤ version < 17.6
Apple
Iphone Os
version < 16.7.9
Iphone Os
17.0 ≤ version < 17.6
Apple
Macos
version < 12.7.6
Macos
13.0 ≤ version < 13.6.8
Macos
14.0 ≤ version < 14.6
Tvos
version < 17.6
Visionos
version < 1.3
Watchos
version < 10.6
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Libtiff
version < 4.6.0
Configuration D
15 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Ai Inference Server
3.2.0 ≤ version < 3.2.2
Ai Inference Server
Version 3.3.0
Redhat
Codeready Linux Builder
Version 10.0
Codeready Linux Builder
Version 8.0
Codeready Linux Builder
Version 9.0
Redhat
Codeready Linux Builder Eus
Version 10.0
Codeready Linux Builder Eus
Version 9.6
Discovery
Version 2.0
Redhat
Enterprise Linux
Version 10.0
Enterprise Linux
Version 6.0
Enterprise Linux
Version 7.0
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0
Redhat
Enterprise Linux Eus
Version 10.0
Enterprise Linux Eus
Version 9.6

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (43)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Issue TrackingVendor Advisory
Source: secalert@redhat.com
Issue TrackingPatchExploit
Source: secalert@redhat.com
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchExploit
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.