Medium severity6.5NVD Advisory· Published Nov 24, 2023· Updated Jun 17, 2026
CVE-2023-6277
CVE-2023-6277
Description
An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:/o:redhat:enterprise_linux:6+ 3 more
- cpe:/o:redhat:enterprise_linux:6
- cpe:/o:redhat:enterprise_linux:7
- cpe:/o:redhat:enterprise_linux:8
- cpe:/o:redhat:enterprise_linux:9
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- osv-coords6 versionspkg:apk/chainguard/tiff-devpkg:apk/chainguard/tiff-docpkg:apk/wolfi/tiff-devpkg:apk/chainguard/tiffpkg:apk/wolfi/tiffpkg:apk/wolfi/tiff-doc
< 4.6.0-r1+ 5 more
- (no CPE)range: < 4.6.0-r1
- (no CPE)range: < 4.6.0-r1
- (no CPE)range: < 4.6.0-r1
- (no CPE)range: < 4.6.0-r1
- (no CPE)range: < 4.6.0-r1
- (no CPE)range: < 4.6.0-r1
Patches
Vulnerability mechanics
References
23- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- gitlab.com/libtiff/libtiff/-/merge_requests/545nvdPatchVendor Advisory
- gitlab.com/libtiff/libtiff/-/issues/614nvdExploitIssue TrackingPatchVendor Advisory
- access.redhat.com/security/cve/CVE-2023-6277nvdThird Party Advisory
- seclists.org/fulldisclosure/2024/Jul/16nvd
- seclists.org/fulldisclosure/2024/Jul/17nvd
- seclists.org/fulldisclosure/2024/Jul/18nvd
- seclists.org/fulldisclosure/2024/Jul/19nvd
- seclists.org/fulldisclosure/2024/Jul/20nvd
- seclists.org/fulldisclosure/2024/Jul/21nvd
- seclists.org/fulldisclosure/2024/Jul/22nvd
- seclists.org/fulldisclosure/2024/Jul/23nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/WJIN6DTSL3VODZUGWEUXLEL5DR53EZMV/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/Y7ZGN2MZXJ6E57W3L4YBM3ZPAU3T7T5C/nvd
- security.netapp.com/advisory/ntap-20240119-0002/nvd
- support.apple.com/kb/HT214116nvd
- support.apple.com/kb/HT214117nvd
- support.apple.com/kb/HT214118nvd
- support.apple.com/kb/HT214119nvd
- support.apple.com/kb/HT214120nvd
- support.apple.com/kb/HT214122nvd
- support.apple.com/kb/HT214123nvd
- support.apple.com/kb/HT214124nvd
News mentions
0No linked articles in our index yet.