DEBIAN-CVE-2023-1916

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2023-1916

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-1916.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-1916

Upstream

CVE-2023-1916

Published

2023-04-10T22:15:09Z

Modified

2025-09-22T12:04:30Z

Summary

[none]

Details

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

References

https://security-tracker.debian.org/tracker/CVE-2023-1916

Affected packages

Debian:13 / tiff

Package

Name: tiff
Purl: pkg:deb/debian/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:14 / tiff

Package

Name: tiff
Purl: pkg:deb/debian/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}