CVE-2023-52355
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-52355 is a newly discovered vulnerability in the libtiff library. It is an out-of-memory issue that can be exploited when the TIFFRasterScanlineSize64() API is called with a specially crafted TIFF file. An attacker can cause a denial of service by providing an input smaller than 379 KB. The flaw allows the attacker to exhaust the target system's memory, leading to a crash or unresponsiveness. This vulnerability poses a significant risk to systems that handle TIFF files and could be used for disruptive attacks. Administrators are advised to update their libtiff libraries to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- LibTIFF
- Red Hat Enterprise Linux
Affected Vendors
- Red Hat
- Libtiff
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions