CVE-2023-6228

LowCVSS 3.3/10Last modified Nov 6, 2026

Description

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—

References

https://access.redhat.com/errata/RHSA-2024:2289
https://access.redhat.com/errata/RHSA-2024:5079
https://access.redhat.com/security/cve/CVE-2023-6228Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2240995Issue Tracking, Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:2289
https://access.redhat.com/security/cve/CVE-2023-6228Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2240995Issue Tracking, Vendor Advisory

Timeline

Published: Dec 18, 2023
Last modified: Nov 6, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-62299.8Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on CVE-2023-62309.8Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser CVE-2023-62319.8Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netwo CVE-2023-62329.8Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser CVE-2023-62339.8Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the n CVE-2023-62349.8Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attack CVE-2023-62357.8An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could p CVE-2023-62367.3A flaw was found in Red Hat Enterprise Application Platform 8. When an OIDC app that serves multiple tenants attempts to access the second t CVE-2023-62375.9Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function E CVE-2023-62386.7A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small m CVE-2023-62398.8Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of CVE-2023-62406.5A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network at