PT-2023-5346 · Libtiff+3 · Libtiff+3

CVE-2023-30086

·

Publicado

2023-05-09

·

Atualizado

2025-06-26

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Libtiff version 4.0.7
Description A Buffer Overflow issue in the tiffcp function of Libtiff allows a local attacker to cause a denial of service. The vulnerability is related to a buffer overflow in memory, which can be exploited to disrupt service. The tiffcp function in tiffcp.c is specifically affected.
Recommendations For Libtiff version 4.0.7, consider disabling the tiffcp function as a temporary workaround until a patch is available. Restrict access to the tiffcp.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2025-7532
ALT-PU-2025-8255
AZL-43927
AZL-44253
BDU:2023-05974
CVE-2023-30086
RHSA-2023:2340
RHSA-2023_2340
ROSA-SA-2025-2657

Produtos afetados

Alt Linux
Astra Linux
Libtiff
Red Hat