CVE-2023-52356
CVE-2023-52356 · Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
CVSS 7.5 · High · EPSS 2.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 10
- Versions
- ≥ 0:4.6.0-6.el10_1.2: Not affected (rpm)
No fix published
red hat enterprise linux 10.0 extended update support
- Versions
- ≥ 0:4.6.0-6.el10_0.2: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:4.0.9-32.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:4.4.0-15.el9: Not affected (rpm)
No fix published
red hat enterprise linux 9.6 extended update support
- Versions
- ≥ 0:4.4.0-13.el9_6.3: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 3.2.2-1765379088: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 3.2.2-1765379049: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 3.2.2-1764871796: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 1780681984: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 1772160593: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 1772160625: Not affected (rpm)
No fix published
red hat ai inference server 3.2
- Versions
- ≥ 1775740563: Not affected (rpm)
No fix published
red hat ai inference server 3.3
- Versions
- ≥ 1778244546: Not affected (rpm)
No fix published
red hat ai inference server 3.3
- Versions
- ≥ 1775680192: Not affected (rpm)
No fix published
red hat ai inference server 3.3
- Versions
- ≥ 1775680262: Not affected (rpm)
No fix published
red hat ai inference server 3.3
- Versions
- ≥ 1775749857: Not affected (rpm)
No fix published
red hat discovery 2
- Versions
- ≥ 2.4.0-1763656152: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 8
No fix published
tiff Debian:12
- Versions
- 4.5.0-6
- 4.5.0-6+deb12u1
- Affected ranges
- ECOSYSTEM: < 4.5.0-6+deb12u2
Update to 4.5.0-6+deb12u2
tiff Debian:13
- Affected ranges
- ECOSYSTEM: < 4.5.1+git230720-4
Update to 4.5.1+git230720-4
tiff Debian:14
- Affected ranges
- ECOSYSTEM: < 4.5.1+git230720-4
Update to 4.5.1+git230720-4
tiff Ubuntu:Pro:14.04:LTS
- Versions
- 4.0.2-4ubuntu3
- 4.0.3-5ubuntu1
- 4.0.3-6
- 4.0.3-6ubuntu1
- 4.0.3-7
- 4.0.3-7ubuntu0.1
- 4.0.3-7ubuntu0.2
- 4.0.3-7ubuntu0.3
- 4.0.3-7ubuntu0.4
- 4.0.3-7ubuntu0.6
- 4.0.3-7ubuntu0.7
- 4.0.3-7ubuntu0.8
- 4.0.3-7ubuntu0.9
- 4.0.3-7ubuntu0.10
- 4.0.3-7ubuntu0.11
- 4.0.3-7ubuntu0.11+esm1
- 4.0.3-7ubuntu0.11+esm2
- 4.0.3-7ubuntu0.11+esm3
- 4.0.3-7ubuntu0.11+esm4
- 4.0.3-7ubuntu0.11+esm5
- 4.0.3-7ubuntu0.11+esm6
- 4.0.3-7ubuntu0.11+esm7
- 4.0.3-7ubuntu0.11+esm8
- 4.0.3-7ubuntu0.11+esm9
- 4.0.3-7ubuntu0.11+esm10
- 4.0.3-7ubuntu0.11+esm11
- Affected ranges
- ECOSYSTEM: < 4.0.3-7ubuntu0.11+esm12
Update to 4.0.3-7ubuntu0.11+esm12
Original sources
- https://access.redhat.com/errata/RHSA-2024:5079
- https://access.redhat.com/errata/RHSA-2025:20801
- https://access.redhat.com/errata/RHSA-2025:21994
- https://access.redhat.com/errata/RHSA-2025:23078
- https://access.redhat.com/errata/RHSA-2025:23079
- https://access.redhat.com/errata/RHSA-2025:23080
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:25096
- https://access.redhat.com/errata/RHSA-2026:3461
- https://access.redhat.com/errata/RHSA-2026:3462
- https://access.redhat.com/errata/RHSA-2026:5958
- https://access.redhat.com/errata/RHSA-2026:7081
- https://access.redhat.com/errata/RHSA-2026:7304
- https://access.redhat.com/errata/RHSA-2026:7335
- https://access.redhat.com/errata/RHSA-2026:8746
- https://access.redhat.com/errata/RHSA-2026:8747
- https://access.redhat.com/errata/RHSA-2026:8748
- https://access.redhat.com/security/cve/CVE-2023-52356
- https://bugzilla.redhat.com/show_bug.cgi?id=2251344
- https://gitlab.com/libtiff/libtiff/-/issues/622
- https://gitlab.com/libtiff/libtiff/-/merge_requests/546
- https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html
- https://support.apple.com/kb/HT214119
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356