CVE-2023-52355
CVE-2023-52355 · Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
CVSS 7.5 · High · EPSS 1.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 10
- Versions
- ≥ 0:4.6.0-8.el10_2.4: Not affected (rpm)
No fix published
red hat enterprise linux 10.0 extended update support
- Versions
- ≥ 0:4.6.0-6.el10_0.4: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:4.4.0-15.el9: Not affected (rpm)
No fix published
red hat enterprise linux 9.6 extended update support
- Versions
- ≥ 0:4.4.0-13.el9_6.5: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 3.2.2-1765379088: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 3.2.2-1765379049: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 3.2.2-1764871796: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 1772160593: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 1772160625: Not affected (rpm)
No fix published
red hat discovery 2
- Versions
- ≥ 2.4.0-1763656152: Not affected (rpm)
No fix published
red hat openshift ai 3.0
- Versions
- ≥ 1790276886: Not affected (rpm)
No fix published
red hat openshift ai 3.0
- Versions
- ≥ 1790276884: Not affected (rpm)
No fix published
red hat openshift ai 3.0
- Versions
- ≥ 1790277045: Not affected (rpm)
No fix published
red hat openshift ai 3.0
- Versions
- ≥ 1790276889: Not affected (rpm)
No fix published
red hat openshift ai 3.0
- Versions
- ≥ 1790276974: Not affected (rpm)
No fix published
red hat openshift ai 3.2
- Versions
- ≥ 1790703497: Not affected (rpm)
No fix published
red hat openshift ai 3.2
- Versions
- ≥ 1790703506: Not affected (rpm)
No fix published
red hat openshift ai 3.2
- Versions
- ≥ 1790703590: Not affected (rpm)
No fix published
red hat openshift ai 3.2
- Versions
- ≥ 1790703568: Not affected (rpm)
No fix published
red hat openshift ai 3.2
- Versions
- ≥ 1790703586: Not affected (rpm)
No fix published
red hat openshift ai 3.2
- Versions
- ≥ 1790703494: Not affected (rpm)
No fix published
red hat openshift ai 3.4
- Versions
- ≥ 1790703542: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2025:20801
- https://access.redhat.com/errata/RHSA-2025:21994
- https://access.redhat.com/errata/RHSA-2025:23078
- https://access.redhat.com/errata/RHSA-2025:23079
- https://access.redhat.com/errata/RHSA-2025:23080
- https://access.redhat.com/errata/RHSA-2026:3461
- https://access.redhat.com/errata/RHSA-2026:3462
- https://access.redhat.com/errata/RHSA-2026:41892
- https://access.redhat.com/errata/RHSA-2026:43537
- https://access.redhat.com/errata/RHSA-2026:49671
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/security/cve/CVE-2023-52355
- https://nvd.nist.gov/vuln/detail/CVE-2023-52355