VDB
DEBIAN-CVE-2023-52355
DEBIAN-CVE-2023-52355
PUBLISHED
CVSS 7.5 HIGH
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | tiff | 0, 0, 0 |
| Debian:11 | tiff | 4.5.0~rc1+git221213-1, 4.5.0, 4.5.1+git230720 |
| Debian:12 | tiff | 4.5.0-6+deb12u1, 4.5.0-6+deb12u4, 4.5.1+git230720-5 |
| Debian:14 | tiff | 0, 0, 0 |
Timeline
- Jan 25, 2024 CVE Published
- Apr 28, 2026 CVE Updated