Vulnerability · Published Dec 18, 2023 · Assigned by redhat
CVE-2023-6228Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
Low 3.3
In plain English
A low-severity out-of-bounds write in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.4%top 65.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libtiff | 4.0.9-32.el8_10 | ALSA-2024:5079 |
| AlmaLinux:9 | libtiff | 4.4.0-12.el9 | ALSA-2024:2289 |
| AlmaLinux:8 | libtiff-devel | 4.0.9-32.el8_10 | ALSA-2024:5079 |
| AlmaLinux:9 | libtiff-devel | 4.4.0-12.el9 | ALSA-2024:2289 |
| AlmaLinux:8 | libtiff-tools | 4.0.9-32.el8_10 | ALSA-2024:5079 |
| AlmaLinux:9 | libtiff-tools | 4.4.0-12.el9 | ALSA-2024:2289 |
| Debian:12 | tiff | no fix listed | DEBIAN-CVE-2023-6228 |
| Debian:13 | tiff | 4.7.0-1 | DEBIAN-CVE-2023-6228 |
| Debian:14 | tiff | 4.7.0-1 | DEBIAN-CVE-2023-6228 |
| Rocky Linux:8 | libtiff | 0:4.0.9-32.el8_10 | RLSA-2024:5079 |
| Ubuntu:22.04:LTS | libgeotiff | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:24.04:LTS | libgeotiff | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:25.10 | libgeotiff | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:26.04:LTS | libgeotiff | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:26.10 | libgeotiff | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:22.04:LTS | libtk-img | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:24.04:LTS | libtk-img | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:25.10 | libtk-img | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:26.04:LTS | libtk-img | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:26.10 | libtk-img | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:22.04:LTS | povray | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:24.04:LTS | povray | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:25.10 | povray | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:26.04:LTS | povray | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:26.10 | povray | no fix listed | UBUNTU-CVE-2023-6228 |
| Ubuntu:22.04:LTS | tiff | 4.3.0-6ubuntu0.8 | UBUNTU-CVE-2023-6228 |
| Ubuntu:22.04:LTS | tiff | 4.3.0-6ubuntu0.8 | USN-6644-2 |
| Ubuntu:24.04:LTS | tiff | 4.5.1+git230720-4ubuntu1 | UBUNTU-CVE-2023-6228 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
References
- RHSA-2024:2289 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:5079 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-6228 vdb-entry, x_refsource_REDHAT
- RHBZ#2240995 issue-tracking, x_refsource_REDHAT