Bug 2203650 (CVE-2023-30086) - CVE-2023-30086 libtiff: Heap buffer overflow in tiffcp() at tiffcp.c
Summary: CVE-2023-30086 libtiff: Heap buffer overflow in tiffcp() at tiffcp.c
Keywords:
Status: NEW
Alias: CVE-2023-30086
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2203667 2203668 2203669 2203670 2203671 2203672
Blocks: 2203206
TreeView+ depends on / blocked
 
Reported: 2023-05-15 03:55 UTC by Sandipan Roy
Modified: 2023-07-07 08:34 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A vulnerability was found in the libtiff library. This flaw causes a buffer overflow in libtiff that allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Sandipan Roy 2023-05-15 03:55:08 UTC 
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.

http://libtiff-release-v4-0-7.com
http://tiffcp.com
https://gitlab.com/libtiff/libtiff/-/issues/538
Comment 1 Sandipan Roy 2023-05-15 04:37:41 UTC 
Created libtiff tracking bugs for this issue:

Affects: fedora-all [bug 2203668]


Created mingw-libtiff tracking bugs for this issue:

Affects: fedora-all [bug 2203669]
Comment 3 Sandipan Roy 2023-06-08 08:42:30 UTC 
Errata for RHEL-9:
https://access.redhat.com/errata/RHSA-2023:2340
Note You need to log in before you can comment on or make changes to this bug.