摘要:
libtiff security update
安全等级: Low
公告ID: KylinSec-SA-2023-1635
发布日期: 2023年8月12日
关联CVE: CVE-2023-38288
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
Multiple potential integer overflow in raw2tiff.c in libtiff <= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2023-38288 | KY3.4-4A | libtiff | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libtiff-help | noarch | 4.3.0-17.kb1.ky3_4 |
| libtiff | x86_64 | 4.3.0-17.kb1.ky3_4 |
| libtiff-devel | x86_64 | 4.3.0-17.kb1.ky3_4 |
| libtiff-devel | aarch64 | 4.3.0-17.kb1.ky3_4 |
| libtiff | aarch64 | 4.3.0-17.kb1.ky3_4 |
sudo dnf udpate libtiff
