Debian/tiff: high 7.5
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer over
Action: Upgrade tiff to 4.5.1+git230720-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.1+git230720-4 | - |
Fixed versions
| 4.5.1+git230720-4 |
Sources
- osv: DEBIAN-CVE-2023-52356#Debian:13/tiff
- https://security-tracker.debian.org/tracker/CVE-2023-52356
published · modified · JSON