Vulnerability · Published Oct 5, 2023 · Assigned by redhat
CVE-2023-40745Libtiff: integer overflow in tiffcp.c
Medium 6.5
In plain English
A medium-severity integer overflow in libtiff. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.4%top 27.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | libtiff | 4.4.0-12.el9 | ALSA-2024:2289 |
| AlmaLinux:9 | libtiff-devel | 4.4.0-12.el9 | ALSA-2024:2289 |
| AlmaLinux:9 | libtiff-tools | 4.4.0-12.el9 | ALSA-2024:2289 |
| Debian:12 | tiff | 4.5.0-6+deb12u1 | DSA-5567-1 |
| Debian:12 | tiff | 4.5.0-6+deb12u1 | DEBIAN-CVE-2023-40745 |
| Debian:13 | tiff | 4.5.1+git230720-1 | DEBIAN-CVE-2023-40745 |
| Debian:14 | tiff | 4.5.1+git230720-1 | DEBIAN-CVE-2023-40745 |
| Ubuntu:22.04:LTS | tiff | 4.3.0-6ubuntu0.5 | UBUNTU-CVE-2023-40745 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| libtiff | 0 – before 4.6.0 | |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
- RHSA-2024:2289 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-40745 vdb-entry, x_refsource_REDHAT
- RHBZ#2235265 issue-tracking, x_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20231110-0005/ x_transferred