CVE-2020-19144

Description

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the in _TIFFmemcpy funtion in the component tif_unix.c.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.504

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3Windows
Tag Image File Format (TIFF) library (USN-5619-1) libtiff5_4.0.9-5ubuntu0.8_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff5_4.0.9-5ubuntu0.8_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff5_4.3.0-6ubuntu0.2_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff5_4.3.0-6ubuntu0.2_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff5_4.1.0+git191117-2ubuntu0.20.04.6_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff5_4.1.0+git191117-2ubuntu0.20.04.6_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.0.9-5ubuntu0.7_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.0.9-5ubuntu0.7_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.3.0-6ubuntu0.5_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.3.0-6ubuntu0.5_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.1.0+git191117-2ubuntu0.20.04.9_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.1.0+git191117-2ubuntu0.20.04.9_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-tools_4.0.9-5ubuntu0.8_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-tools_4.0.9-5ubuntu0.8_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-tools_4.3.0-6ubuntu0.2_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-tools_4.3.0-6ubuntu0.2_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.04.6_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.04.6_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.0.9-5ubuntu0.7_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.0.9-5ubuntu0.7_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.3.0-6ubuntu0.7_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.3.0-6ubuntu0.7_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.1.0+git191117-2ubuntu0.20.04.5_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.1.0+git191117-2ubuntu0.20.04.5_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.0.9-5ubuntu0.7_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.0.9-5ubuntu0.7_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.3.0-6ubuntu0.1_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.3.0-6ubuntu0.1_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.1.0+git191117-2ubuntu0.20.04.5_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiffxx5_4.1.0+git191117-2ubuntu0.20.04.5_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.0.9-5ubuntu0.7_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.0.9-5ubuntu0.7_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.3.0-6ubuntu0.1_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.3.0-6ubuntu0.1_amd64.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.1.0+git191117-2ubuntu0.20.04.5_i386.debLinux
Tag Image File Format (TIFF) library (USN-5619-1) libtiff-opengl_4.1.0+git191117-2ubuntu0.20.04.5_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234