CVE-2023-6277 — Uncontrolled Resource Consumption in Fedora

CWE-400 — Uncontrolled Resource Consumption19 documents9 sources
Severity
6.5MEDIUMNVD
OSV7.5
EPSS
3.8%
top 11.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fedoraproject Fedora
Timeline
PublishedNov 24
Latest updateJul 29

Description

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages0 packages

Also affects: Fedora 38

Patches

Patch: bugzilla.redhat.com ↗Patch: gitlab.com ↗Patch: gitlab.com ↗

🔴Vulnerability Details

5
OSV
tiff vulnerabilities↗2024-02-27
▶
OSV
tiff vulnerabilities↗2024-02-19
▶
GHSA
GHSA-fq8g-55cp-756j: An out-of-memory flaw was found in libtiff↗2023-11-24
▶
CVEList
Libtiff: out-of-memory in tiffopen via a craft file↗2023-11-24
▶
OSV
CVE-2023-6277: An out-of-memory flaw was found in libtiff↗2023-11-24
▶

📋Vendor Advisories

13
Apple
CVE-2023-6277: visionOS 1.3↗2024-07-29
▶
Apple
CVE-2023-6277: watchOS 10.6↗2024-07-29
▶
Apple
CVE-2023-6277: iOS 17.6 and iPadOS 17.6↗2024-07-29
▶
Apple
CVE-2023-6277: macOS Sonoma 14.6↗2024-07-29
▶
Apple
CVE-2023-6277: iOS 16.7.9 and iPadOS 16.7.9↗2024-07-29
▶
CVE-2023-6277 — Uncontrolled Resource Consumption | cvebase