SUSE-SU-2023:4371-1: tiff&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2023:4371-1 is a vulnerability in tiff&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 9 · Downstream 0 · Related 9Timeline
- 06-11-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for tiff This update for tiff fixes the following issues: - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589). - CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590). - CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273). - CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574). - CVE-2023-26966: Fixed an out of bounds read when transforming a little-endian file to a big-endian output (bsc#1212881) - CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3 files (bsc#1213274). - CVE-2023-2908: Fixed an undefined behavior issue when doing pointer arithmetic on a NULL pointer (bsc#1212888). - CVE-2023-3316: Fixed a NULL pointer dereference while opening a file in an inaccessible path (bsc#1212535). - CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- tiff&distro=SUSE Linux Enterprise Server 12 SP5< 4.0.9-44.71.1
- tiff&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 4.0.9-44.71.1
- tiff&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 4.0.9-44.71.1
1 vendor · 3 products