Log in Start free

Vulnerability · Published Jan 25, 2024 · Assigned by redhat

CVE-2023-52356Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

High 7.5

In plain English

A high-severity heap buffer overflow in libtiff. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)2.5%top 15.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC

Official description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10libtiff4.6.0-6.el10_1.2ALSA-2026:7081
AlmaLinux:8libtiff4.0.9-32.el8_10ALSA-2024:5079
AlmaLinux:10libtiff-devel4.6.0-6.el10_1.2ALSA-2026:7081
AlmaLinux:8libtiff-devel4.0.9-32.el8_10ALSA-2024:5079
AlmaLinux:10libtiff-tools4.6.0-6.el10_1.2ALSA-2026:7081
AlmaLinux:8libtiff-tools4.0.9-32.el8_10ALSA-2024:5079
Debian:12tiff4.5.0-6+deb12u2DEBIAN-CVE-2023-52356
Debian:13tiff4.5.1+git230720-4DEBIAN-CVE-2023-52356
Debian:14tiff4.5.1+git230720-4DEBIAN-CVE-2023-52356
Rocky Linux:10libtiff0:4.6.0-6.el10_1.2RLSA-2026:7081
Rocky Linux:8libtiff0:4.0.9-32.el8_10RLSA-2024:5079
Rocky Linux:9libtiff0:4.4.0-15.el9_7.2.0.1RLSA-2025:20801
Ubuntu:25.10qtwebengine-opensource-srcno fix listedUBUNTU-CVE-2023-52356
Ubuntu:26.10qtwebengine-opensource-srcno fix listedUBUNTU-CVE-2023-52356
Ubuntu:25.10texmakerno fix listedUBUNTU-CVE-2023-52356
Ubuntu:26.04:LTStexmakerno fix listedUBUNTU-CVE-2023-52356
Ubuntu:26.10texmakerno fix listedUBUNTU-CVE-2023-52356
Ubuntu:22.04:LTStiff4.3.0-6ubuntu0.8UBUNTU-CVE-2023-52356
Ubuntu:22.04:LTStiff4.3.0-6ubuntu0.8USN-6644-2
Ubuntu:24.04:LTStiff4.5.1+git230720-4ubuntu1UBUNTU-CVE-2023-52356

Affected products (as reported)

VendorProductVersions
libtiff 0 – before 4.6.0
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.2 see references
Red Hat Red Hat AI Inference Server 3.3 see references
Red Hat Red Hat AI Inference Server 3.3 see references
Red Hat Red Hat AI Inference Server 3.3 see references
Red Hat Red Hat AI Inference Server 3.3 see references
Red Hat Red Hat Discovery 2 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references

Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References