CVEvulnerability
CVE-2023-6277
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
Affected configurations
• libtiff libtiff
• fedoraproject fedora 38
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://access.redhat.com/security/cve/CVE-2023-6277 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251311 Issue Tracking, Patch, Third Party Advisory
- https://gitlab.com/libtiff/libtiff/-/issues/614 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://gitlab.com/libtiff/libtiff/-/merge_requests/545 Patch, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Jul/16 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/17 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/18 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/19 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/20 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/21 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/22 seclists.org
- http://seclists.org/fulldisclosure/2024/Jul/23 seclists.org
- https://access.redhat.com/security/cve/CVE-2023-6277 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251311 Issue Tracking, Patch, Third Party Advisory
- https://gitlab.com/libtiff/libtiff/-/issues/614 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://gitlab.com/libtiff/libtiff/-/merge_requests/545 Patch, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/WJIN6DTSL3VODZUGWEUXLEL5DR53EZMV/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/Y7ZGN2MZXJ6E57W3L4YBM3ZPAU3T7T5C/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20240119-0002/ security.netapp.com
- https://support.apple.com/kb/HT214116 support.apple.com
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214118 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com
- https://support.apple.com/kb/HT214122 support.apple.com
- https://support.apple.com/kb/HT214123 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com