← CVE Intelligence

CVE-2023-52356

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service PUBLISHED

Description (CNA)

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 4.6.0
Red Hat / Red Hat Enterprise Linux 10unaffected 0:4.6.0-6.el10_1.2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:4.6.0-6.el10_0.2 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.0.9-32.el8_10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.4.0-15.el9 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:4.4.0-13.el9_6.3 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 3.2.2-1765379088 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 3.2.2-1765379049 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 3.2.2-1764871796 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1780681984 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1772160593 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1772160625 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1775740563 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1778244546 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1775680192 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1775680262 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1775749857 before *
Red Hat / Red Hat Discovery 2unaffected 2.4.0-1763656152 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 8affected

CWE

CWE-122

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.