Security Advisory

CVE-2023-2908

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-30 00:00:00
Last updated 2025-11-03 20:35:30
Assigner redhat
State PUBLISHED

Description

A null pointer dereference issue was found in Libtiffs tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.