CVE-2023-1916
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the ext...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- BellSoft Alpaquita BELL-CVE-2023-1916 tiff
- Debian DEBIAN-CVE-2023-1916 tiff
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- report gitlab.com
- report gitlab.com
- web support.apple.com