CVE-2023-40745
CVE-2023-40745 · Libtiff: integer overflow in tiffcp.c
This page contains facts from public vulnerability sources. Check the original advisory before updating.
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
CVSS 6.5 · Medium · EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 9
- Versions
- ≥ 0:4.4.0-12.el9: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 8
No fix published
tiff Debian:12
- Versions
- 4.5.0-6
- Affected ranges
- ECOSYSTEM: < 4.5.0-6+deb12u1
Update to 4.5.0-6+deb12u1
tiff Debian:13
- Affected ranges
- ECOSYSTEM: < 4.5.1+git230720-1
Update to 4.5.1+git230720-1
tiff Debian:14
- Affected ranges
- ECOSYSTEM: < 4.5.1+git230720-1
Update to 4.5.1+git230720-1