CVE-2023-26965

Related Files

Ubuntu Security Notice USN-6290-1

Posted Aug 16, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6290-1 - It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. It was discovered that LibTIFF incorrectly handled certain image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2022-48281, CVE-2023-26965, CVE-2023-2731, CVE-2023-2908, CVE-2023-3316, CVE-2023-3618, CVE-2023-38288

SHA-256 | dea439e173df06f4701c3d819ad53b19bb3bf0a6496304490d18dec1b8d0c9e5

Download | Favorite | View