CVE-2023-1916
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the ext...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- BellSoft Alpaquita BELL-CVE-2023-1916 tiff
- Debian DEBIAN-CVE-2023-1916 tiff
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- report gitlab.com
- report gitlab.com
- web support.apple.com