Vulnerabilities > CVE-2023-2908 - NULL Pointer Dereference vulnerability in Libtiff

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

libtiff

CWE-476

NVD

Published: 2023-06-30

Updated: 2023-11-07

Summary

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.

Vulnerable Configurations

Part	Description	Count
Application	Libtiff Libtiff Libtiff - Libtiff Libtiff 3.4 Libtiff Libtiff 3.5.1 Libtiff Libtiff 3.5.2 Libtiff Libtiff 3.5.3 Libtiff Libtiff 3.5.4 Libtiff Libtiff 3.5.5 Libtiff Libtiff 3.5.6 Libtiff Libtiff 3.5.7 Libtiff Libtiff 3.6.0 Libtiff Libtiff 3.6.1 Libtiff Libtiff 3.7.0 Libtiff Libtiff 3.7.1 Libtiff Libtiff 3.7.2 Libtiff Libtiff 3.7.3 Libtiff Libtiff 3.7.4 Libtiff Libtiff 3.8.0 Libtiff Libtiff 3.8.1 Libtiff Libtiff 3.8.2 Libtiff Libtiff 3.9 Libtiff Libtiff 3.9.0 Libtiff Libtiff 3.9.1 Libtiff Libtiff 3.9.2 Libtiff Libtiff 3.9.2-5.2.1 Libtiff Libtiff 3.9.3 Libtiff Libtiff 3.9.4 Libtiff Libtiff 3.9.5 Libtiff Libtiff 3.9.6 Libtiff Libtiff 3.9.7 Libtiff Libtiff 4.0 Libtiff Libtiff 4.0.0 Libtiff Libtiff 4.0.1 Libtiff Libtiff 4.0.2 Libtiff Libtiff 4.0.3 Libtiff Libtiff 4.0.3-35 Libtiff Libtiff 4.0.4 Libtiff Libtiff 4.0.5 Libtiff Libtiff 4.0.6 Libtiff Libtiff 4.0.7 Libtiff Libtiff 4.0.8 Libtiff Libtiff 4.0.9 Libtiff Libtiff 4.0.10 Libtiff Libtiff 4.1.0 Libtiff Libtiff 4.2.0 Libtiff Libtiff 4.3.0 Libtiff Libtiff 4.4.0	82

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References