A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Advisories
Source ID Title
Debian DSA Debian DSA DSA-5567-1 tiff security update
EUVD EUVD EUVD-2023-45692 A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 12 Nov 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/a:redhat:enterprise_linux:8
cpe:/o:redhat:rhel_els:6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els

Wed, 04 Dec 2024 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-122

Sun, 24 Nov 2024 12:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-680

Fri, 22 Nov 2024 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-122

Wed, 06 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-11-12T03:04:48.838Z

Reserved: 2023-08-25T09:21:36.645Z

Link: CVE-2023-41175

cve-icon Vulnrichment

Updated: 2024-08-02T18:54:04.334Z

cve-icon NVD

Status : Modified

Published: 2023-10-05T19:15:11.340

Modified: 2026-11-12T04:17:16.897

Link: CVE-2023-41175

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-07-21T00:00:00Z

Links: CVE-2023-41175 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses