CVE-2023-2731
Published: 17 May 2023
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
tiff
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code not present)
|
| focal |
Not vulnerable
(code not present)
|
|
| jammy |
Not vulnerable
(code not present)
|
|
| kinetic |
Ignored
(end of life, was needed)
|
|
| lunar |
Released
(4.5.0-5ubuntu1.1)
|
|
| trusty |
Not vulnerable
(code not present)
|
|
| upstream |
Released
(4.5.0-6,4.5.1)
|
|
| xenial |
Not vulnerable
(code not present)
|
|
|
Patches:
upstream: https://gitlab.com/libtiff/libtiff/-/commit/9be22b639ea69e102d3847dca4c53ef025e9527b |
||
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |