CVE-2023-0796
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file....
Description d'origine
La description telle que publiée par la source (souvent en anglais).
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2023-0796 tiff Corrigé dans: 4.4.0-r2
- BellSoft Alpaquita BELL-CVE-2023-0796
- Debian DEBIAN-CVE-2023-0796 tiff Corrigé dans: 4.2.0-1+deb11u4
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory debian.org
- patch gitlab.com
- report gitlab.com
- web gitlab.com
- web lists.debian.org