CVE-2023-3576
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A memory leak flaw was found in Libtiff's tiffcrop utility that occurs when processing a TIFF image file. An attacker can pass a crafted TIFF image file to the tiffcrop utility, causing this memory leak issue, resulting in application crashes and ultimately leading to denial of service.
Risk Assessment
This vulnerability can lead to application crashes, potentially disrupting service availability within the organization. Exploitation of this vulnerability by an attacker may result in denial of service for users.
Recommendation
It is recommended to update the Libtiff library to the latest version to mitigate this vulnerability. Additionally, monitoring and restricting access to the tiffcrop utility may help minimize risk.
Original NVD description (English source)
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.