CVE-2023-2908
30.06.2023, 22:15
A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.Enginsight
Vendor | Product | Version |
---|---|---|
libtiff | libtiff | 𝑥 ≤ 4.5.0 |
𝑥
= Vulnerable software versions

Debian Releases

Ubuntu Releases
Common Weakness Enumeration
References