REDHAT-BUG-2383608: Buffer Overflow

Q: What is the severity of REDHAT-BUG-2383608?

The severity of REDHAT-BUG-2383608 is rated as critical.

Q: What vulnerability does REDHAT-BUG-2383608 address?

REDHAT-BUG-2383608 addresses a buffer overflow vulnerability in the LibTIFF library.

Q: How do I fix REDHAT-BUG-2383608?

To fix REDHAT-BUG-2383608, apply the patch e8c9d6c616b19438695fd829e58ae4fde5bfbc22.

Q: Which versions of LibTIFF are affected by REDHAT-BUG-2383608?

LibTIFF versions up to and including 4.7.0 are affected by REDHAT-BUG-2383608.

Q: Is remote exploitation possible with REDHAT-BUG-2383608?

No, exploitation of REDHAT-BUG-2383608 must be approached locally.

Published Jul 26, 2025

Updated

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

1 affected component

LibTIFF libtiff<=4.7.0

Event History

Jul 26, 2025

Data Sourced

via Red Hat·05:01 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2383608?

The severity of REDHAT-BUG-2383608 is rated as critical.

What vulnerability does REDHAT-BUG-2383608 address?

REDHAT-BUG-2383608 addresses a buffer overflow vulnerability in the LibTIFF library.

How do I fix REDHAT-BUG-2383608?

To fix REDHAT-BUG-2383608, apply the patch e8c9d6c616b19438695fd829e58ae4fde5bfbc22.

Which versions of LibTIFF are affected by REDHAT-BUG-2383608?

LibTIFF versions up to and including 4.7.0 are affected by REDHAT-BUG-2383608.

Is remote exploitation possible with REDHAT-BUG-2383608?

No, exploitation of REDHAT-BUG-2383608 must be approached locally.