Log in Start free

Vulnerability · Published Jan 25, 2024 · Assigned by redhat

CVE-2023-52355Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

High 7.5

In plain English

A high-severity out-of-bounds write in libtiff. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.8%top 21.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10libtiff4.6.0-8.el10_2.4ALSA-2026:41892
AlmaLinux:10libtiff-devel4.6.0-8.el10_2.4ALSA-2026:41892
AlmaLinux:10libtiff-tools4.6.0-8.el10_2.4ALSA-2026:41892
Debian:12tiffno fix listedDEBIAN-CVE-2023-52355
Debian:13tiff4.5.1+git230720-4DEBIAN-CVE-2023-52355
Debian:14tiff4.5.1+git230720-4DEBIAN-CVE-2023-52355
Rocky Linux:10libtiff0:4.6.0-8.el10_2.4RLSA-2026:41892
Rocky Linux:9libtiff0:4.4.0-15.el9_7.2.0.1RLSA-2025:20801
Ubuntu:22.04:LTSneuronno fix listedUBUNTU-CVE-2023-52355
Ubuntu:22.04:LTSqtwebengine-opensource-srcno fix listedUBUNTU-CVE-2023-52355
Ubuntu:22.04:LTStexmakerno fix listedUBUNTU-CVE-2023-52355
Ubuntu:22.04:LTStiffno fix listedUBUNTU-CVE-2023-52355

Affected products (as reported)

VendorProductVersions
libtiff 0 – before 4.6.0
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat Discovery 2 see references
Red Hat Red Hat OpenShift AI 3.0 see references
Red Hat Red Hat OpenShift AI 3.0 see references
Red Hat Red Hat OpenShift AI 3.0 see references
Red Hat Red Hat OpenShift AI 3.0 see references
Red Hat Red Hat OpenShift AI 3.0 see references
Red Hat Red Hat OpenShift AI 3.2 see references
Red Hat Red Hat OpenShift AI 3.2 see references
Red Hat Red Hat OpenShift AI 3.2 see references
Red Hat Red Hat OpenShift AI 3.2 see references
Red Hat Red Hat OpenShift AI 3.2 see references
Red Hat Red Hat OpenShift AI 3.2 see references
Red Hat Red Hat OpenShift AI 3.4 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References