{"id":"CVE-2023-6228","aliases":["ALSA-2024:2289","ALSA-2024:5079","AZL-32176","AZL-34956","BELL-CVE-2023-6228","CLSA-2025-1744116383","DEBIAN-CVE-2023-6228","EUVD-2023-58475","GHSA-4v5g-xjvw-59g6","MGASA-2024-0164","OESA-2023-1857","RHSA-2024:2289","RHSA-2024:5079","RLSA-2024:5079","ROOT-OS-DEBIAN-12-CVE-2023-6228","UBUNTU-CVE-2023-6228","USN-6644-1","USN-6644-2"],"status":"published","title":"Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00399,"percentile":0.34608,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-787"],"published":"2023-11-21T05:57:36.822413Z","modified":"2026-11-11T09:37:12Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libtiff","fixed_in":["4.6.0-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libtiff","fixed_in":["4.6.0-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.7.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.7.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libtiff","fixed_in":["4.5.1-1.3.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libtiff","fixed_in":["4.3.0-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libtiff","fixed_in":["4.3.0-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libtiff","fixed_in":["4.3.0-34.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libtiff","fixed_in":["4.3.0-34.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"libtiff","fixed_in":["4.3.0-34.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11+esm12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.8+esm15"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.10+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"tiff","fixed_in":["4.1.0+git191117-2ubuntu0.20.04.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"tiff","fixed_in":["4.3.0-6ubuntu0.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"tiff","fixed_in":["4.5.1+git230720-4ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-6"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.0-6","4.5.0-6+deb12u1","4.5.0-6+deb12u2","4.5.0-6+deb12u3","4.5.0-6+deb12u4","4.5.1+git230720-1","4.5.1+git230720-2","4.5.1+git230720-3","4.5.1+git230720-4","4.5.1+git230720-5","4.5.1-1","4.5.1~rc3-1","4.6.0-1","4.6.0-2","4.7.0-1","4.7.0-2","4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.3.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-34.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-34.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-34.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-32.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm12"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10","4.0.3-7ubuntu0.11+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm15"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13","4.0.6-1ubuntu0.8+esm14"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.4.2+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.0-8build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.10+esm5"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3","4.0.9-5ubuntu0.10+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.4.6+dfsg-1","1:1.4.7+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.0-9build2","1:3.7.0.0-9build3","1:3.7.0.4-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.12"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10","4.1.0+git191117-2ubuntu0.20.04.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libgeotiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.1-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.4.9+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.8-1","1:3.7.0.8-1build1","1:3.7.0.8-3","1:3.7.0.8-4","1:3.7.0.8-4build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.4.13+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.8-5","1:3.7.0.10-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.8"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6","4.3.0-6ubuntu0.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libgeotiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.1-2build1","1.7.1-3","1.7.1-5","1.7.1-5build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.4.14+dfsg-2","1:1.4.15+dfsg-2.1","1:1.4.15+dfsg-3","1:1.4.16+dfsg1-1","1:1.4.16+dfsg1-1build1","1:1.4.16+dfsg1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.10-3","1:3.7.0.10-3build1","1:3.7.0.10-3build3","1:3.7.0.10-3build4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1+git230720-4ubuntu1"}]}],"versions":["4.5.1+git230720-1ubuntu1","4.5.1+git230720-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libgeotiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.4-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.0.1+dfsg1-1","1:2.0.1+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.10-3build4","1:3.7.0.10-3build6"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libgeotiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.4-1build1","1.7.4-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libtk-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.1.0+dfsg1-1","1:2.1.1+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.10-3build7","1:3.7.0.10-3build8"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libgeotiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.4-1","1.7.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"povray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7.0.10-3build6","1:3.7.0.10-3build7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm12"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10","4.0.3-7ubuntu0.11+esm11"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm15"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13","4.0.6-1ubuntu0.8+esm14"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.10+esm5"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3","4.0.9-5ubuntu0.10+esm4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.12"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10","4.1.0+git191117-2ubuntu0.20.04.11"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.8"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6","4.3.0-6ubuntu0.7"],"bundled":3}],"products":[{"vendor":"libtiff","product":"libtiff"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2289","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5079","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6228","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240995","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6228","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4v5g-xjvw-59g6"},{"url":"https://access.redhat.com/security/cve/CVE-2022-40090","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3618","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40745","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41175","tags":["report"]},{"url":"https://bugzilla.redhat.com/2215865","tags":["report"]},{"url":"https://bugzilla.redhat.com/2234970","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235264","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235265","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240995","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2289.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15209","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25433","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-52356","tags":["report"]},{"url":"https://bugzilla.redhat.com/1614051","tags":["report"]},{"url":"https://bugzilla.redhat.com/2218744","tags":["report"]},{"url":"https://bugzilla.redhat.com/2251344","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-5079.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-6228","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1744116383.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-6228","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0164.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33163","tags":["report"]},{"url":"https://lwn.net/Articles/971682/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1857","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235265","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2289.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40090","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3618","tags":["advisory"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/529","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6228","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40745","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41175","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251344","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5079.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15209","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25433","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52356","tags":["advisory"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/622","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/546","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:5079","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-6228","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6644-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6644-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-6277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-52356","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-6228","title":"Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T13:43:08.775Z","modified":"2026-11-06T13:40:17.63Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-06T14:58:28.173309Z"}],"euvd":[{"id":"EUVD-2023-58475","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T13:43:08Z","modified":"2026-11-06T13:40:17Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T15:05:10.688381Z"}],"ghsa":[{"id":"GHSA-4v5g-xjvw-59g6","title":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF...","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-28T18:30:32Z","modified":"2024-08-07T18:31:41Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-787"],"updated_at":"2026-11-02T14:57:52.94689Z"}],"nvd":[{"id":"CVE-2023-6228","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T14:15:11.84Z","modified":"2026-11-06T14:17:01.71Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-06T16:00:30.581664Z"}],"osv":[{"id":"AZL-32176","title":"CVE-2023-6228 affecting package libtiff for versions less than 4.6.0-6","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T14:15:11Z","modified":"2026-04-21T04:26:41.845099Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34956","title":"CVE-2023-6228 affecting package libtiff for versions less than 4.6.0-6","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T14:15:11Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2023-6228","status":"published","published":"2023-11-21T05:57:36.822413Z","modified":"2026-09-06T07:15:23.789050995Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2023-6228","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T14:15:11.84Z","modified":"2026-04-16T04:30:59.025399421Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-6228","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T14:15:11.84Z","modified":"2026-11-07T09:47:34.867701043Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2023-1857","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was found in the tiffcp utility distributed by the libtiff package. Processing a crafted TIFF file may cause a heap-based buffer overflow, resulting in an application crash.\r\n\r\nReference:\nhttps://gitlab.com/libtiff/libtiff/-/issues/606(CVE-2023-6228)","status":"published","published":"2023-11-24T11:06:18Z","modified":"2026-08-18T01:18:04.075276743Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:2289","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T16:53:08Z","modified":"2026-07-03T10:05:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:5079","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T20:04:37Z","modified":"2026-07-03T10:05:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2023-6228","description":"An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.","status":"published","published":"2023-12-18T14:15:00Z","modified":"2026-11-11T09:37:12.676419755Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-11T09:59:45.211399Z"},{"id":"ALSA-2024:2289","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)\n* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)\n* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)\n* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)\n* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:09.234769659Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:5079","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)\n* libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)\n* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)\n* libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-07T00:00:00Z","modified":"2026-10-29T11:02:21.589747004Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1744116383","title":"libtiff: Fix of 4 CVEs","description":"- CVE-2024-7006: check return value of _TIFFCreateAnonField() to avoid potential DoS via\n  memory allocation failures\n- CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer\n  overflow and potential application crash\n- CVE-2022-40090: improve IFD loop handling in TIFFReadDirectory to prevent DoS via\n  crafted TIFF files\n- CVE-2023-2731: handle missing end-of-information marker in LZWDecode() to prevent\n  NULL pointer dereference and potential DoS","status":"published","published":"2025-04-08T12:46:28Z","modified":"2026-10-21T10:45:08.614298116Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"MGASA-2024-0164","title":"Updated libtiff packages fix security vulnerability","description":"An issue was found in the tiffcp utility distributed by the libtiff\npackage where a crafted TIFF file on processing may cause a heap-based\nbuffer overflow leads to an application crash. (CVE-2023-6228)\n","status":"published","published":"2024-05-09T02:40:29Z","modified":"2026-04-16T04:43:32.335375988Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"RLSA-2024:5079","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)\n\n* libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)\n\n* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)\n\n* libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-21T14:52:31.100489Z","modified":"2026-02-04T22:00:09.927019Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-6228","title":"CVE-2023-6228 in tiff - Patched by Root","description":"Root has patched CVE-2023-6228 in the tiff package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-02T12:45:33Z","modified":"2026-09-02T14:00:03.398583419Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"USN-6644-1","title":"tiff vulnerabilities","description":"It was discovered that LibTIFF incorrectly handled certain files. If\na user were tricked into opening a specially crafted file, an attacker\ncould possibly use this issue to cause the application to crash, resulting\nin a denial of service. (CVE-2023-52356)\n\nIt was discovered that LibTIFF incorrectly handled certain image files\nwith the tiffcp utility. If a user were tricked into opening a specially\ncrafted image file, an attacker could possibly use this issue to cause\ntiffcp to crash, resulting in a denial of service. (CVE-2023-6228)\n\nIt was discovered that LibTIFF incorrectly handled certain files. If\na user were tricked into opening a specially crafted file, an attacker\ncould possibly use this issue to cause the application to consume\nresources, resulting in a denial of service. (CVE-2023-6277)\n","status":"published","published":"2024-02-19T20:07:28Z","modified":"2026-06-29T13:46:58.147146242Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6644-2","title":"tiff vulnerabilities","description":"USN-6644-1 fixed vulnerabilities in LibTIFF.\nThis update provides the corresponding updates for Ubuntu 22.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that LibTIFF incorrectly handled certain files. If\n a user were tricked into opening a specially crafted file, an attacker\n could possibly use this issue to cause the application to crash, resulting\n in a denial of service. (CVE-2023-52356)\n \n It was discovered that LibTIFF incorrectly handled certain image files\n with the tiffcp utility. If a user were tricked into opening a specially\n crafted image file, an attacker could possibly use this issue to cause\n tiffcp to crash, resulting in a denial of service. (CVE-2023-6228)\n \n It was discovered that LibTIFF incorrectly handled certain files. If\n a user were tricked into opening a specially crafted file, an attacker\n could possibly use this issue to cause the application to consume\n resources, resulting in a denial of service. (CVE-2023-6277)\n","status":"published","published":"2024-02-27T18:31:07Z","modified":"2026-04-27T17:17:25.091683549Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}