Libtiff Vulnerabilidad

Cronología

El año pasado

Versión

4.0.3	46
4.0.6	46
4.0.1	42
4.0.2	40
4.0.7	35

Contramedidas

Official Fix	215
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	49

Explotabilidad

High	1
Functional	0
Proof-of-Concept	37
Unproven	5
Not Defined	223

Vector de acceso

Not Defined	0
Physical	0
Local	32
Adjacent	7
Network	227

Autenticación

Not Defined	0
High	0
Low	20
None	246

La interacción del usuario

Not Defined	0
Required	123
None	143

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	25
≤6	84
≤7	58
≤8	61
≤9	8
≤10	26

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	29
≤6	86
≤7	71
≤8	44
≤9	8
≤10	22

VulDB

≤1	0
≤2	0
≤3	0
≤4	12
≤5	54
≤6	57
≤7	51
≤8	61
≤9	1
≤10	30

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	39
≤7	60
≤8	37
≤9	25
≤10	15

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	20
≤7	13
≤8	5
≤9	1
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	58
<2k	102
<5k	105
<10k	0
<25k	0
<50k	1
<100k	0
≥100k	0

Explotar hoy

<1k	250
<2k	12
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (47): 3.0, 3.1, 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5, 3.5.6, 3.5.7, 3.6, 3.6.1, 3.7, 3.7.1, 3.7.2, 3.7.3, 3.7.4, 3.8, 3.8.1, 3.8.2, 3.9, 3.9.1, 3.9.2, 3.9.2-5.2.1, 3.9.3, 3.9.4, 3.9.5, 4, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.3-35.amzn2.0.1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.1, 4.2, 4.3, 4.4, 4.4.0rc1, 4.5, 4.5.1, libtiff5.tif

Link to Product Website: http://www.libtiff.org/

Tipo de software: Image Processing Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-01-24	5.9	5.8	LibTIFF TIFFReadRGBATileExt denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-52356
2024-01-24	5.9	5.8	LibTIFF TIFFRasterScanlineSize64 denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-52355
2023-11-24	6.1	6.0	LibTIFF File tif_dirread.c TIFFOpen denegación de servicio	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.08	CVE-2023-6277
2023-11-21	6.3	6.3	LibTIFF tiffcp.c cpStripToTile desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-6228
2023-08-28	6.3	6.3	LibTIFF tiffcp.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-40745
2023-08-28	6.3	6.3	LibTIFF Integer Overflow raw2tiff.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-41175
2023-08-23	5.5	5.5	LibTIFF TIFF File tif_unix.c _TIFFmemcpy desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-18768
2023-08-23	5.0	4.9	libtiff TIFF File TIFFReadDirectory denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-40090
2023-07-26	6.3	6.3	LibTIFF tiffcp.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01	CVE-2023-38289
2023-07-26	6.3	6.3	LibTIFF raw2tiff.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-38288
2023-07-12	6.3	6.3	LibTIFF tif_fax3.c Fax3Encode desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08	CVE-2023-3618
2023-07-10	4.3	3.9	LibTIFF tiffcrop.c createCroppedImage denegación de servicio	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2023-3576
2023-06-30	4.9	4.9	LibTIFF tif_dir.c denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2023-2908
2023-06-29	5.9	5.8	LibTIFF uv_encode desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-26966
2023-06-29	5.9	5.8	LibTIFF tiffcrop.c rotateImage desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2023-25433
2023-06-22	5.9	5.9	LibTIFF tiffcrop.c extractContigSamplesShifted8bits desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25435
2023-06-19	5.4	5.3	LibTIFF Output File null TIFFClose denegación de servicio	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02	CVE-2023-3316
2023-06-15	5.9	5.8	LibTIFF tiffcrop.c loadImage desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-26965
2023-06-15	7.1	7.1	LibTIFF tiffcrop.c extractContigSamplesBytes desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25434
2023-06-08	5.5	5.5	LibTIFF extractImageSection desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-3164
2023-05-18	4.4	4.3	Libtiff tif_lzw.c LZWDecode denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-2731
2023-05-09	4.4	4.4	LibTIFF tiffcp.c tiffcp denegación de servicio	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-30086
2023-04-24	5.3	5.0	LibTIFF tiffcrop desbordamiento de búfer	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2023-30774
2023-04-22	4.8	4.6	LibTIFF tiffcrop.c extractContigSamples32bits desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-30775
2023-04-11	6.2	6.2	LibTIFF tiffcrop tiffcrop.c extractImageSection divulgación de información	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-1916

Libtiff Vulnerabilidad

Cronología

El año pasado

Versión

Contramedidas

Explotabilidad

Vector de acceso

Autenticación

La interacción del usuario

C3BM Index

El año pasado

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Proveedor

Research

Explotar día 0

Explotar hoy

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

🔒 Login Required

Do you know our Splunk app?