CVE-2023-38288
libtiff security update
Not a Security Issue.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
What each source reports
OSV Score usedOESA-2023-1460
libtiff security update
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)
Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38289)
- Record
OESA-2023-1460- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV Score usedOESA-2023-1461
libtiff security update
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)
Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38289)
- Record
OESA-2023-1461- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV Score usedOESA-2023-1462
libtiff security update
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)
Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38289)
- Record
OESA-2023-1462- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV Score usedOESA-2023-1463
libtiff security update
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)
Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38289)
- Record
OESA-2023-1463- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV Score usedOESA-2023-1483
libtiff security update
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)
- Record
OESA-2023-1483- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
CVE List No score
Not a Security Issue.
- Record
CVE-2023-38288- Updated
- 2026-11-02
Show 8 moreShow less
EUVDEUVD-2023-42107 No score
Not a Security Issue.
- Record
EUVD-2023-42107- Updated
- 2026-11-03
NVD No score
Rejected reason: Not a Security Issue.
- Record
CVE-2023-38288- Updated
- 2026-11-02
OSVSUSE-SU-2023:4370-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589).
- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).
- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).
- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).
- CVE-2023-26966: Fixed an out of bounds read when transforming a little-endian file to a big-endian output (bsc#1212881)
- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3 files (bsc#1213274).
- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer arithmetic on a NULL pointer (bsc#1212888).
- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file in an inaccessible path (bsc#1212535).
- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
- Record
SUSE-SU-2023:4370-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4371-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589).
- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).
- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).
- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).
- CVE-2023-26966: Fixed an out of bounds read when transforming a little-endian file to a big-endian output (bsc#1212881)
- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3 files (bsc#1213274).
- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer arithmetic on a NULL pointer (bsc#1212888).
- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file in an inaccessible path (bsc#1212535).
- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
- Record
SUSE-SU-2023:4371-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0915-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).
- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).
- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).
- CVE-2015-8668: Fixed Heap-based buffer overflow in bmp2tiff / PackBitsEncode (bsc#960589).
- Record
SUSE-SU-2024:0915-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0973-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).
- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).
- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).
- Record
SUSE-SU-2024:0973-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-38288 No score
Rejected reason: Not a Security Issue.
- Record
UBUNTU-CVE-2023-38288- Updated
- 2026-11-02
OSVUSN-6290-1 No score
tiff vulnerabilities
It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-48281)
It was discovered that LibTIFF incorrectly handled certain image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. (CVE-2023-2731)
It was discovered that LibTIFF incorrectly handled certain image files with the tiffcp utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcp to crash, resulting in a denial of service. (CVE-2023-2908)
It was discovered that LibTIFF incorrectly handled certain file paths. If a user were tricked into specifying certain output paths, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-3316)
It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2023-3618)
It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-25433, CVE-2023-26966)
It was discovered that LibTIFF did not properly managed memory when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-26965)
It was discovered that LibTIFF contained an arithmetic overflow. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. (CVE-2023-38288, CVE-2023-38289)
- Record
USN-6290-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtiffopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 4.3.0-16.oe1 | 4.3.0-16.oe1 |
libtiffopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 4.3.0-30.oe2203 | 4.3.0-30.oe2203 |
libtiffopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.3.0-30.oe2203sp1 | 4.3.0-30.oe2203sp1 |
libtiffopenEuler:22.03-LTS-SP2 From an advisory covering 2 CVEs |
before 4.3.0-30.oe2203sp2 | 4.3.0-30.oe2203sp2 |
libtiffopenEuler:20.03-LTS-SP1 |
before 4.3.0-16.oe1 | 4.3.0-16.oe1 |
tiffSUSE:Linux Enterprise Micro 5.3 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Micro 5.4 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Micro 5.5 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tiffSUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Micro 5.2 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffopenSUSE:Leap Micro 5.3 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffopenSUSE:Leap Micro 5.4 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffopenSUSE:Leap 15.4 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffopenSUSE:Leap 15.5 From an advisory covering 9 CVEs |
before 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 |
tiffSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 9 CVEs |
before 4.0.9-44.71.1 | 4.0.9-44.71.1 |
tiffSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 9 CVEs |
before 4.0.9-44.71.1 | 4.0.9-44.71.1 |
tiffSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 9 CVEs |
before 4.0.9-44.71.1 | 4.0.9-44.71.1 |
tiffSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 4 CVEs |
before 4.0.9-44.80.1 | 4.0.9-44.80.1 |
tiffSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs |
before 4.0.9-44.80.1 | 4.0.9-44.80.1 |
tiffSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs |
before 4.0.9-44.80.1 | 4.0.9-44.80.1 |
tiffSUSE:Linux Enterprise Micro 5.3 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffSUSE:Linux Enterprise Micro 5.4 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffSUSE:Linux Enterprise Micro 5.5 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffSUSE:Linux Enterprise Micro 5.2 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffopenSUSE:Leap Micro 5.3 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffopenSUSE:Leap Micro 5.4 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffopenSUSE:Leap 15.5 From an advisory covering 3 CVEs |
before 4.0.9-150000.45.41.1 | 4.0.9-150000.45.41.1 |
tiffUbuntu:Pro:14.04:LTS |
before 4.0.3-7ubuntu0.11+esm9, plus listed versions 4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7 Show 18 moreShow less4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm8 |
4.0.3-7ubuntu0.11+esm9 |
tiffUbuntu:Pro:16.04:LTS |
before 4.0.6-1ubuntu0.8+esm12, plus listed versions 4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2 Show 16 moreShow less4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm11 |
4.0.6-1ubuntu0.8+esm12 |
tiffUbuntu:Pro:18.04:LTS |
before 4.0.9-5ubuntu0.10+esm2, plus listed versions 4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3 Show 14 moreShow less4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm1 |
4.0.9-5ubuntu0.10+esm2 |
tiffUbuntu:20.04:LTS |
before 4.1.0+git191117-2ubuntu0.20.04.9, plus listed versions 4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1 Show 7 moreShow less4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.8 |
4.1.0+git191117-2ubuntu0.20.04.9 |
tiffUbuntu:22.04:LTS |
before 4.3.0-6ubuntu0.5, plus listed versions 4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4 Show 6 moreShow less4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.4 |
4.3.0-6ubuntu0.5 |
tiffUbuntu:Pro:14.04:LTS From an advisory covering 10 CVEs |
before 4.0.3-7ubuntu0.11+esm9, plus listed versions 4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7 Show 18 moreShow less4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm8 |
4.0.3-7ubuntu0.11+esm9 |
tiffUbuntu:Pro:16.04:LTS From an advisory covering 10 CVEs |
before 4.0.6-1ubuntu0.8+esm12, plus listed versions 4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2 Show 16 moreShow less4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm11 |
4.0.6-1ubuntu0.8+esm12 |
tiffUbuntu:Pro:18.04:LTS From an advisory covering 10 CVEs |
before 4.0.9-5ubuntu0.10+esm2, plus listed versions 4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3 Show 14 moreShow less4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm1 |
4.0.9-5ubuntu0.10+esm2 |
tiffUbuntu:20.04:LTS From an advisory covering 10 CVEs |
before 4.1.0+git191117-2ubuntu0.20.04.9, plus listed versions 4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1 Show 7 moreShow less4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.8 |
4.1.0+git191117-2ubuntu0.20.04.9 |
tiffUbuntu:22.04:LTS From an advisory covering 10 CVEs |
before 4.3.0-6ubuntu0.5, plus listed versions 4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4 Show 6 moreShow less4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.4 |
4.3.0-6ubuntu0.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-38288 has been rejected by its source and should not be treated as a live vulnerability, published July 31, 2023. Fixed in libtiff 4.3.0-16.oe1.
References
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1460
nvd.nist.gov/vuln/detail/CVE-2023-38288
Show 42 moreShow less
suse.com/support/update/announcement/2023/suse-su-20234370-1
bugzilla.suse.com/1212535
ubuntu.com/security/CVE-2023-38288
cve.org/CVERecord?id=CVE-2023-38288