CVE-2023-0798

mediumPriorität · verfolgen · 22EPSS 0.004 · 36. PerzentilDEEUFRRUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.42% (36th) EPSS
CVSS 5.5 · medium
Is it mine?
72 products
Prüfe deine Angriffsfläche
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenlibtiff-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-0:4.4.0-8.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-0:4.4.0-8.el9_2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debuginfo-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-debugsource-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-devel-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-devel-0:4.4.0-8.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-devel-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-devel-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-devel-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
  • Behobenlibtiff-tools-debuginfo-0:4.4.0-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2023:3711
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 3.6
v3.15.5mediumAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.16.8mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hsecondary · ENISA EU
v3.16.8mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hsecondary · cve@gitlab.comAusnutzbarkeit 2.5 · Auswirkung 4.2
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Hsecondary · Red Hat Product Security US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-125USprimärCWE-125USCWE-125US
05

betroffene Produkte (72)

Betroffene Produkte und Versionsbereiche.

20 von 72 angezeigt
06

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2023:3711Red Hat Security Advisory: libtiff security update2023-06-21csaf · redhat_csafUS

    An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2023-0350libTIFF: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2023-02-13csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • WID-SEC-W-2023-1424Xerox FreeFlow Print Server für Solaris: Mehrere SchwachstellenDeutsch2023-06-12csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.

  • CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundredhat_csafcertfrNVDCVE.orgMITRE
veröffentlicht 2023-02-13geändert 2026-06-17
10

Referenzen (26)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan