Buffer Overflow Vulnerability in Libtiff Affects Local Attackers
CVE-2023-30086

5.5MEDIUM

Key Information:

Vendor

Libtiff

Status
Libtiff
Vendor
CVE Published:
9 May 2023

What is CVE-2023-30086?

A buffer overflow vulnerability has been identified in Libtiff version 4.0.7, specifically within the tiffcp function found in tiffcp.c. This security flaw can be exploited by a local attacker to execute a denial of service, potentially interrupting normal operations. Users of Libtiff are advised to review their systems for this specific version to mitigate any risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://libtiff-release-v4-0-7.com
http://tiffcp.com
https://gitlab.com/libtiff/libtiff/-/issues/538

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.