CVE-2023-38289: Integer Overflow

Reference Links

• https://launchpad.net/bugs/cve/CVE-2023-38289
• https://security-tracker.debian.org/tracker/CVE-2023-38289
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38289
• https://nvd.nist.gov/vuln/detail/CVE-2023-38289
• https://ubuntu.com/security/CVE-2023-38289
• https://www.ibm.com/support/pages/node/7177223 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7177223

Frequently Asked Questions

• Is CVE-2023-38289 a security issue?

  No, it is not a security issue.

• What versions of the tiff package are affected by CVE-2023-38289?

  The versions affected are 4.0.3-7ubuntu0.11+ (trusty), 4.0.6-1ubuntu0.8+ (xenial), 4.0.9-5ubuntu0.10+ (bionic), 4.1.0+ (focal), 4.3.0-6ubuntu0.5 (jammy), 4.5.0-5ubuntu1.1 (lunar), and 4.5.1+ (upstream).

• How can I fix the CVE-2023-38289 vulnerability?

  The recommended fix for CVE-2023-38289 is to update the tiff package to version 4.1.0+ or later.

• Where can I find more information about CVE-2023-38289?

  You can find more information about CVE-2023-38289 at the following references: [1] [2] [3].

• What is the Common Weakness Enumeration (CWE) for CVE-2023-38289?

  The CWE for CVE-2023-38289 is CWE-190.