Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2023-52355
PUBLISHED
More InfoOfficial Page
Assigner-redhat
Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749
View Known Exploited Vulnerability (KEV) details
Published At-25 Jan, 2024 | 20:03
Updated At-22 Jul, 2026 | 17:28
Rejected At-
▼CVE Numbering Authority (CNA)
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Affected Products
Collection URL
https://gitlab.com/libtiff/libtiff
Package Name
libtiff
Default Status
unaffected
Versions
Affected
  • From 0 before 4.6.0 (semver)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 10
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
libtiff
CPEs
  • cpe:/o:redhat:enterprise_linux:10.2
Default Status
affected
Versions
Unaffected
  • From 0:4.6.0-8.el10_2.4 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
libtiff
CPEs
  • cpe:/a:redhat:enterprise_linux:9::appstream
  • cpe:/a:redhat:enterprise_linux:9::crb
Default Status
affected
Versions
Unaffected
  • From 0:4.4.0-15.el9 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9.6 Extended Update Support
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
libtiff
CPEs
  • cpe:/a:redhat:rhel_eus:9.6::appstream
  • cpe:/a:redhat:rhel_eus:9.6::crb
Default Status
affected
Versions
Unaffected
  • From 0:4.4.0-13.el9_6.5 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.2
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-cuda-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.2::el9
Default Status
affected
Versions
Unaffected
  • From 3.2.2-1765379088 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.2
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-rocm-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.2::el9
Default Status
affected
Versions
Unaffected
  • From 3.2.2-1765379049 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.2
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/model-opt-cuda-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.2::el9
Default Status
affected
Versions
Unaffected
  • From 3.2.2-1764871796 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.2
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-cuda-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.2::el9
Default Status
affected
Versions
Unaffected
  • From 1772160593 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.2
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-rocm-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.2::el9
Default Status
affected
Versions
Unaffected
  • From 1772160625 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Discovery 2
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
discovery/discovery-ui-rhel9
CPEs
  • cpe:/a:redhat:discovery:2::el9
Default Status
affected
Versions
Unaffected
  • From 2.4.0-1763656152 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 6
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
libtiff
CPEs
  • cpe:/o:redhat:enterprise_linux:6
Default Status
unknown
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 7
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
compat-libtiff3
CPEs
  • cpe:/o:redhat:enterprise_linux:7
Default Status
unknown
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 7
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
libtiff
CPEs
  • cpe:/o:redhat:enterprise_linux:7
Default Status
unknown
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 8
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
compat-libtiff3
CPEs
  • cpe:/o:redhat:enterprise_linux:8
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 8
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
libtiff
CPEs
  • cpe:/o:redhat:enterprise_linux:8
Default Status
affected
Problem Types
TypeCWE IDDescription
CWECWE-787Out-of-bounds Write
Type: CWE
CWE ID: CWE-787
Description: Out-of-bounds Write
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Metrics Other Info
Red Hat severity rating
value:
Moderate
namespace:
https://access.redhat.com/security/updates/classification/
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Reported to Red Hat.2023-11-24 00:00:00
Made public.2023-11-03 00:00:00
Event: Reported to Red Hat.
Date: 2023-11-24 00:00:00
Event: Made public.
Date: 2023-11-03 00:00:00
Replaced By
Rejected Reason
References
HyperlinkResource
https://access.redhat.com/errata/RHSA-2025:20801
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21994
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23078
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23079
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23080
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3461
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3462
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41892
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43537
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-52355
vdb-entry
x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2251326
issue-tracking
x_refsource_REDHAT
https://gitlab.com/libtiff/libtiff/-/issues/621
N/A
Hyperlink: https://access.redhat.com/errata/RHSA-2025:20801
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2025:21994
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2025:23078
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2025:23079
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2025:23080
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:3461
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:3462
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:41892
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:43537
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/security/cve/CVE-2023-52355
Resource:
vdb-entry
x_refsource_REDHAT
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=2251326
Resource:
issue-tracking
x_refsource_REDHAT
Hyperlink: https://gitlab.com/libtiff/libtiff/-/issues/621
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://access.redhat.com/security/cve/CVE-2023-52355
vdb-entry
x_refsource_REDHAT
x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=2251326
issue-tracking
x_refsource_REDHAT
x_transferred
https://gitlab.com/libtiff/libtiff/-/issues/621
x_transferred
Hyperlink: https://access.redhat.com/security/cve/CVE-2023-52355
Resource:
vdb-entry
x_refsource_REDHAT
x_transferred
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=2251326
Resource:
issue-tracking
x_refsource_REDHAT
x_transferred
Hyperlink: https://gitlab.com/libtiff/libtiff/-/issues/621
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found