Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-3618

Fixed in a distro release EPSS 1%CVSS 6.5

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

Published 2023-07-12 · CVE record · OSV

Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora

Distro releases

ReleasePackageFixed in
AlmaLinux 9libtiff4.4.0-12.el9
AlmaLinux 9libtiff-devel4.4.0-12.el9
AlmaLinux 9libtiff-tools4.4.0-12.el9
Debian 10tiff4.1.0+git191117-2~deb10u8
Debian 11tiff4.2.0-1+deb11u6
Debian 12tiff4.5.0-6+deb12u2
Debian 13tiff4.5.1~rc3-1
Debian 14tiff4.5.1~rc3-1
Red Hat Enterprise Linux 9libtiff0:4.4.0-12.el9
Red Hat Enterprise Linux 9libtiff-debuginfo0:4.4.0-12.el9
Red Hat Enterprise Linux 9libtiff-debugsource0:4.4.0-12.el9
Red Hat Enterprise Linux 9libtiff-devel0:4.4.0-12.el9
Red Hat Enterprise Linux 9libtiff-tools0:4.4.0-12.el9
Red Hat Enterprise Linux 9libtiff-tools-debuginfo0:4.4.0-12.el9
SUSE Linux Enterprise Micro 5.2tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Micro 5.3tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Micro 5.4tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Micro 5.5tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Module for Basesystem 15 SP4tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Module for Basesystem 15 SP5tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Module for Package Hub 15 SP4tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Module for Package Hub 15 SP5tiff4.0.9-150000.45.32.1
SUSE Linux Enterprise Server 12 SP5tiff4.0.9-44.71.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5tiff4.0.9-44.71.1
SUSE Linux Enterprise Software Development Kit 12 SP5tiff4.0.9-44.71.1
Ubuntu 20.04 LTStiff4.1.0+git191117-2ubuntu0.20.04.9
Ubuntu 22.04 LTStiff4.3.0-6ubuntu0.5
Ubuntu Pro 14.04 LTStiff4.0.3-7ubuntu0.11+esm9
Ubuntu Pro 16.04 LTStiff4.0.6-1ubuntu0.8+esm12
Ubuntu Pro 18.04 LTStiff4.0.9-5ubuntu0.10+esm2
openSUSE Leap 15.4tiff4.0.9-150000.45.32.1
openSUSE Leap 15.5tiff4.0.9-150000.45.32.1
openSUSE Leap Micro 5.3tiff4.0.9-150000.45.32.1
openSUSE Leap Micro 5.4tiff4.0.9-150000.45.32.1