CVE-2023-30086: Buffer Overflow
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.
Other sources
LibTIFF is vulnerable to a denial of service, caused by a heap-based buffer overflow in the tiffcp function in tiffcp.c. A local attacker could exploit this vulnerability to cause the application to crash.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-30086?
CVE-2023-30086 is a Buffer Overflow vulnerability found in Libtiff V.4.0.7 that allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.
What is the severity of CVE-2023-30086?
The severity of CVE-2023-30086 is medium with a CVSS score of 5.5.
What software is affected by CVE-2023-30086?
Libtiff V.4.0.7 is affected by CVE-2023-30086.
How can a local attacker exploit CVE-2023-30086?
A local attacker can exploit CVE-2023-30086 by leveraging the buffer overflow vulnerability in the tiffcp function in tiffcp.c.
Where can I find more information about CVE-2023-30086?
You can find more information about CVE-2023-30086 at the following references: [http://libtiff-release-v4-0-7.com](http://libtiff-release-v4-0-7.com), [http://tiffcp.com](http://tiffcp.com), [https://gitlab.com/libtiff/libtiff/-/issues/538](https://gitlab.com/libtiff/libtiff/-/issues/538).