libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 10

• Medium 6.8
  CVE-2023-0795

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0796

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0797

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and too…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0798

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0799

  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-s…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0800

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0801

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and to…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0802

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0803

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023
• Medium 6.8
  CVE-2023-0804

  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-…

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Feb 13, 2023

Revision history

1. 2026-07-01 #17

   Neue Updates von SUSE aufgenommen

2. 2026-06-23 #16

   Neue Updates von SUSE aufgenommen

3. 2025-11-09 #15

   Neue Updates von Oracle Linux aufgenommen

4. 2025-11-06 #14

   Neue Updates von Dell aufgenommen

5. 2025-06-30 #13

   Neue Updates von Dell aufgenommen

6. 2023-09-26 #12

   Neue Updates von Oracle Linux und Red Hat aufgenommen

7. 2023-09-25 #11

   Neue Updates von Amazon aufgenommen

8. 2023-09-07 #10

   Neue Updates von Amazon aufgenommen

9. 2023-08-28 #9

   Neue Updates von Fedora aufgenommen

10. 2023-06-21 #8

    Neue Updates von Red Hat und Oracle Linux aufgenommen

11. 2023-05-30 #7

    Neue Updates von SUSE aufgenommen

12. 2023-05-29 #6

    Neue Updates von Gentoo aufgenommen

13. 2023-03-16 #5

    Neue Updates von NetApp aufgenommen

14. 2023-03-06 #4

    Neue Updates von Ubuntu aufgenommen

15. 2023-02-23 #3

    Neue Updates von Debian aufgenommen

16. 2023-02-21 #2

    Neue Updates von Debian aufgenommen

17. 2023-02-13 #1

    Initiale Fassung

References

• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-cjrm-898p-cxjr
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-m222-cmhp-v9m7
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-9qfj-r558-84rj
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-xmcc-cx53-xxg3
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-9xvv-g7xh-f2qr
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-5wrv-vvhx-3wgq
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-29xc-g6f6-8cf9
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-rxvx-wrgw-qpv7
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-2rv8-rcwh-2x8r
• GitHub Advisory Database vom 2023-02-13
  https://github.com/advisories/GHSA-wq4c-r2c3-fv9c
• Debian Security Advisory DLA-3333 vom 2023-02-22
  https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html
• Debian Security Advisory DSA-5361 vom 2023-02-24
  https://lists.debian.org/debian-security-announce/2023/msg00050.html
• Ubuntu Security Notice USN-5923-1 vom 2023-03-06
  https://ubuntu.com/security/notices/USN-5923-1
• NetApp Security Advisory NTAP-20230316-0003 vom 2023-03-16
  https://security.netapp.com/advisory/ntap-20230316-0003/
• NetApp Security Advisory NTAP-20230316-0002 vom 2023-03-16
  https://security.netapp.com/advisory/ntap-20230316-0002/
• Gentoo Linux Security Advisory GLSA-202305-31 vom 2023-05-30
  https://security.gentoo.org/glsa/202305-31
• SUSE Security Update SUSE-SU-2023:2321-1 vom 2023-05-30
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/015017.html
• Red Hat Security Advisory RHSA-2023:3711 vom 2023-06-21
  https://access.redhat.com/errata/RHSA-2023:3711
• Oracle Linux Security Advisory ELSA-2023-3711 vom 2023-06-22
  http://linux.oracle.com/errata/ELSA-2023-3711.html
• Fedora Security Advisory FEDORA-2023-8DAF1023C7 vom 2023-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-8daf1023c7
• Amazon Linux Security Advisory ALAS2-2023-2236 vom 2023-09-08
  https://alas.aws.amazon.com/AL2/ALAS-2023-2236.html
• Amazon Linux Security Advisory ALAS2-2023-2235 vom 2023-09-08
  https://alas.aws.amazon.com/AL2/ALAS-2023-2235.html
• Amazon Linux Security Advisory ALAS-2023-1830 vom 2023-09-26
  https://alas.aws.amazon.com/ALAS-2023-1830.html
• Amazon Linux Security Advisory ALAS-2023-1829 vom 2023-09-26
  https://alas.aws.amazon.com/ALAS-2023-1829.html
• Oracle Linux Security Advisory ELSA-2023-5353 vom 2023-09-27
  http://linux.oracle.com/errata/ELSA-2023-5353.html
• Red Hat Security Advisory RHSA-2023:5353 vom 2023-09-26
  https://access.redhat.com/errata/RHSA-2023:5353
• Dell Security Advisory DSA-2025-234 vom 2025-07-01
  https://www.dell.com/support/kbdoc/000337969
• Dell Security Advisory DSA-2023-268 vom 2025-11-06
  https://www.dell.com/support/kbdoc/de-de/000216397/dsa-2023-268-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities
• Oracle Linux Security Advisory ELSA-2025-19906 vom 2025-11-07
  http://linux.oracle.com/errata/ELSA-2025-19906.html
• SUSE Security Update SUSE-SU-2026:22234-1 vom 2026-06-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026875.html
• SUSE Security Update SUSE-SU-2026:22306-1 vom 2026-07-01
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027153.html