CVE-2023-30774: Buffer Overflow
Published Apr 17, 2023
·Updated
A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values.
Credit
CVE-2023-30774
Affected Software
6 affected componentsFixes available
IBM Cognos Analytics<=12.0.0-12.0.3
IBM Cognos Analytics<=11.2.0-11.2.4 FP4
Apple macOS Sonoma<14.1
14.1
LibTIFF libtiff=4.0.0
LibTIFF libtiff>=3.5.1<=4.4.0
Apple macOS<14.1
Event History
Apr 17, 2023
Data Sourced
via Red Hat·04:54 AM
DescriptionSeverityAffected Software
May 19, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this flaw in the libtiff library?
The vulnerability ID for this flaw in the libtiff library is CVE-2023-30774.
2
What is the severity of CVE-2023-30774?
CVE-2023-30774 has a severity rating of medium.
3
How does CVE-2023-30774 manifest?
CVE-2023-30774 manifests as a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values.
4
Which version of the libtiff library is affected by CVE-2023-30774?
The libtiff library version 4.0.0 is affected by CVE-2023-30774.
5
Are there any known fixes or patches available for CVE-2023-30774?
Yes, the vulnerability has been reported and fixes or patches may be available. It is recommended to check with the vendor or official sources for the latest updates.