libTIFF: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 5.5
  CVE-2023-3576

  Libtiff: memory leak in tiffcrop.c

  A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an applicatio…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 4, 2023

Revision history

1. 2025-06-30 #6

   Neue Updates von Dell aufgenommen

2. 2024-03-11 #5

   Neue Updates von Debian aufgenommen

3. 2023-11-26 #4

   Neue Updates von Debian aufgenommen

4. 2023-11-23 #3

   Neue Updates von Ubuntu aufgenommen

5. 2023-11-07 #2

   Neue Updates von Red Hat aufgenommen

6. 2023-07-25 #1

   Initiale Fassung

References

• Red Hat Bugzilla – Bug 2219340 vom 2023-07-25
  https://bugzilla.redhat.com/show_bug.cgi?id=2219340
• Proof of Concept (PoC) vom 2023-07-25
  https://gitlab.com/libtiff/libtiff/-/merge_requests/475
• Amazon Linux Security Advisory vom 2023-07-25
  https://alas.aws.amazon.com/ALAS-2023-1788.html
• Amazon Linux Security Advisory ALAS2-2023-2157 vom 2023-07-26
  https://alas.aws.amazon.com/AL2/ALAS-2023-2157.html
• Amazon Linux Security Advisory ALAS2-2023-2158 vom 2023-07-26
  https://alas.aws.amazon.com/AL2/ALAS-2023-2158.html
• Red Hat Security Advisory RHSA-2023:6575 vom 2023-11-07
  https://access.redhat.com/errata/RHSA-2023:6575
• Ubuntu Security Notice USN-6512-1 vom 2023-11-23
  https://ubuntu.com/security/notices/USN-6512-1
• Debian Security Advisory DSA-5567 vom 2023-11-27
  https://lists.debian.org/debian-security-announce/2023/msg00263.html
• Debian Security Advisory DLA-3758 vom 2024-03-11
  https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html
• Dell Security Advisory DSA-2025-234 vom 2025-07-01
  https://www.dell.com/support/kbdoc/000337969