CVE-2023-0795

Katalog CVE

CVSS 5.5 · Medium EPSS 0,42%

Kerentanan Out-of-bounds Read pada libtiff. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.

Rincian

Terbit di NVD

13 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.com/libtiff/libtiff/-/issues/493 exploit · issue tracking · patch · advisory vendor
• https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 patch
• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0795.json vdb entry
• https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html
• https://security.gentoo.org/glsa/202305-31
• https://security.netapp.com/advisory/ntap-20230316-0003/
• https://www.debian.org/security/2023/dsa-5361