Skip to content
OpenAdvisories
Medium USN-5923-1 10 CVEs

tiff vulnerabilities

Published Mar 6, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibTIFF could be made to read out of bounds when
processing certain malformed image files with the tiffcrop tool. If a user
were tricked into opening a specially crafted image file, an attacker
could possibly use this issue to cause tiffcrop to crash, resulting in a
denial of service. (CVE-2023-0795, CVE-2023-0796, CVE-2023-0797,
CVE-2023-0798, CVE-2023-0799)

It was discovered that LibTIFF could be made to write out of bounds when
processing certain malformed image files with the tiffcrop tool. If a user
were tricked into opening a specially crafted image file, an attacker
could possibly use this issue to cause tiffcrop to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2023-0800,
CVE-2023-0801, CVE-2023-0802, CVE-2023-0803, CVE-2023-0804)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS tiff 4.0.9-5ubuntu0.10
Ubuntu · 20.04 LTS 20.04:LTS tiff 4.1.0+git191117-2ubuntu0.20.04.8
Ubuntu · 22.04 LTS 22.04:LTS tiff 4.3.0-6ubuntu0.4
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS tiff 4.0.3-7ubuntu0.11+esm7
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS tiff 4.0.6-1ubuntu0.8+esm10

Vulnerabilities 10

References

  • report
    https://ubuntu.com/security/CVE-2023-0795
  • report
    https://ubuntu.com/security/CVE-2023-0796
  • report
    https://ubuntu.com/security/CVE-2023-0797
  • report
    https://ubuntu.com/security/CVE-2023-0798
  • report
    https://ubuntu.com/security/CVE-2023-0799
  • report
    https://ubuntu.com/security/CVE-2023-0800
  • report
    https://ubuntu.com/security/CVE-2023-0801
  • report
    https://ubuntu.com/security/CVE-2023-0802
  • report
    https://ubuntu.com/security/CVE-2023-0803
  • report
    https://ubuntu.com/security/CVE-2023-0804