CVE-2023-0801
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing a...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2023-0801 tiff Corrigé dans: 4.4.0-r2
- BellSoft Alpaquita BELL-CVE-2023-0801
- Debian DEBIAN-CVE-2023-0801 tiff Corrigé dans: 4.2.0-1+deb11u4
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory debian.org
- patch gitlab.com
- report gitlab.com
- web gitlab.com
- web lists.debian.org