Vulnerability · Published Feb 13, 2023 · Assigned by GitLab
CVE-2023-0803
Medium 6.8
In plain English
A medium-severity out-of-bounds write in libtiff from libtiff. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.4%top 62.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libtiff | 4.0.9-29.el8_8 | ALSA-2023:5353 |
| AlmaLinux:9 | libtiff | 4.4.0-8.el9_2 | ALSA-2023:3711 |
| AlmaLinux:8 | libtiff-devel | 4.0.9-29.el8_8 | ALSA-2023:5353 |
| AlmaLinux:9 | libtiff-devel | 4.4.0-8.el9_2 | ALSA-2023:3711 |
| AlmaLinux:8 | libtiff-tools | 4.0.9-29.el8_8 | ALSA-2023:5353 |
| AlmaLinux:9 | libtiff-tools | 4.4.0-8.el9_2 | ALSA-2023:3711 |
| Alpine:v3.20 | tiff | 4.5.0-r5 | ALPINE-CVE-2023-0803 |
| Alpine:v3.21 | tiff | 4.5.0-r5 | ALPINE-CVE-2023-0803 |
| Alpine:v3.22 | tiff | 4.5.0-r5 | ALPINE-CVE-2023-0803 |
| Alpine:v3.23 | tiff | 4.5.0-r5 | ALPINE-CVE-2023-0803 |
| Alpine:v3.24 | tiff | 4.5.0-r5 | ALPINE-CVE-2023-0803 |
| Debian:12 | tiff | 4.5.0-5 | DEBIAN-CVE-2023-0803 |
| Debian:13 | tiff | 4.5.0-5 | DEBIAN-CVE-2023-0803 |
| Debian:14 | tiff | 4.5.0-5 | DEBIAN-CVE-2023-0803 |
| Rocky Linux:8 | libtiff | 0:4.0.9-29.el8_8 | RLSA-2023:5353 |
| Rocky Linux:9 | libtiff | 0:4.4.0-8.el9_2 | RLSA-2023:3711 |
| Ubuntu:22.04:LTS | tiff | 4.3.0-6ubuntu0.4 | USN-5923-1 |
| Ubuntu:22.04:LTS | tiff | 4.3.0-6ubuntu0.4 | UBUNTU-CVE-2023-0803 |
Affected products (as reported)
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
References
- https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
- https://gitlab.com/libtiff/libtiff/-/issues/501
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json
- [debian-lts-announce] 20230221 [SECURITY] [DLA 3333-1] tiff security update mailing-list
- DSA-5361 vendor-advisory
- https://security.netapp.com/advisory/ntap-20230316-0002/
- GLSA-202305-31 vendor-advisory