← CVE Intelligence

CVE-2023-52355

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom PUBLISHED

Description (CNA)

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 4.6.0
Red Hat / Red Hat Enterprise Linux 10unaffected 0:4.6.0-8.el10_2.4 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:4.6.0-6.el10_0.4 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.4.0-15.el9 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:4.4.0-13.el9_6.5 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 3.2.2-1765379088 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 3.2.2-1765379049 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 3.2.2-1764871796 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1772160593 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1772160625 before *
Red Hat / Red Hat Discovery 2unaffected 2.4.0-1763656152 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276886 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276884 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790277045 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276889 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276974 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703497 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703506 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703590 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703568 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703586 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703494 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703542 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 8affected

CWE

CWE-787

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.