csaf_suse - suse-su-2023:4371-1

Vulnerability from csaf_suse

Published

2023-11-06 08:52

Modified

2023-11-06 08:52

Summary

Security update for tiff

Notes

Title of the patch

Security update for tiff

Description of the patch

This update for tiff fixes the following issues: - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589). - CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590). - CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273). - CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574). - CVE-2023-26966: Fixed an out of bounds read when transforming a little-endian file to a big-endian output (bsc#1212881) - CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3 files (bsc#1213274). - CVE-2023-2908: Fixed an undefined behavior issue when doing pointer arithmetic on a NULL pointer (bsc#1212888). - CVE-2023-3316: Fixed a NULL pointer dereference while opening a file in an inaccessible path (bsc#1212535). - CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).

Patchnames

SUSE-2023-4371,SUSE-SLE-SDK-12-SP5-2023-4371,SUSE-SLE-SERVER-12-SP5-2023-4371

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for tiff",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for tiff fixes the following issues:\n\n- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff\n  (bsc#1213589).\n- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).\n- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).\n- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).\n- CVE-2023-26966: Fixed an out of bounds read when transforming a\n  little-endian file to a big-endian output (bsc#1212881)\n- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3\n  files (bsc#1213274).\n- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer\n  arithmetic on a NULL pointer (bsc#1212888).\n- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file\n  in an inaccessible path (bsc#1212535).\n- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2023-4371,SUSE-SLE-SDK-12-SP5-2023-4371,SUSE-SLE-SERVER-12-SP5-2023-4371",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4371-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2023:4371-1",
            url: "https://www.suse.com/support/update/announcement/2023/suse-su-20234371-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2023:4371-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2023-November/016999.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1212535",
            url: "https://bugzilla.suse.com/1212535",
         },
         {
            category: "self",
            summary: "SUSE Bug 1212881",
            url: "https://bugzilla.suse.com/1212881",
         },
         {
            category: "self",
            summary: "SUSE Bug 1212883",
            url: "https://bugzilla.suse.com/1212883",
         },
         {
            category: "self",
            summary: "SUSE Bug 1212888",
            url: "https://bugzilla.suse.com/1212888",
         },
         {
            category: "self",
            summary: "SUSE Bug 1213273",
            url: "https://bugzilla.suse.com/1213273",
         },
         {
            category: "self",
            summary: "SUSE Bug 1213274",
            url: "https://bugzilla.suse.com/1213274",
         },
         {
            category: "self",
            summary: "SUSE Bug 1213589",
            url: "https://bugzilla.suse.com/1213589",
         },
         {
            category: "self",
            summary: "SUSE Bug 1213590",
            url: "https://bugzilla.suse.com/1213590",
         },
         {
            category: "self",
            summary: "SUSE Bug 1214574",
            url: "https://bugzilla.suse.com/1214574",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-18768 page",
            url: "https://www.suse.com/security/cve/CVE-2020-18768/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-25433 page",
            url: "https://www.suse.com/security/cve/CVE-2023-25433/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-26966 page",
            url: "https://www.suse.com/security/cve/CVE-2023-26966/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-2908 page",
            url: "https://www.suse.com/security/cve/CVE-2023-2908/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-3316 page",
            url: "https://www.suse.com/security/cve/CVE-2023-3316/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-3576 page",
            url: "https://www.suse.com/security/cve/CVE-2023-3576/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-3618 page",
            url: "https://www.suse.com/security/cve/CVE-2023-3618/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-38288 page",
            url: "https://www.suse.com/security/cve/CVE-2023-38288/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-38289 page",
            url: "https://www.suse.com/security/cve/CVE-2023-38289/",
         },
      ],
      title: "Security update for tiff",
      tracking: {
         current_release_date: "2023-11-06T08:52:20Z",
         generator: {
            date: "2023-11-06T08:52:20Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2023:4371-1",
         initial_release_date: "2023-11-06T08:52:20Z",
         revision_history: [
            {
               date: "2023-11-06T08:52:20Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.9-44.71.1.aarch64",
                        product: {
                           name: "libtiff-devel-4.0.9-44.71.1.aarch64",
                           product_id: "libtiff-devel-4.0.9-44.71.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.9-44.71.1.aarch64",
                        product: {
                           name: "libtiff5-4.0.9-44.71.1.aarch64",
                           product_id: "libtiff5-4.0.9-44.71.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.9-44.71.1.aarch64",
                        product: {
                           name: "tiff-4.0.9-44.71.1.aarch64",
                           product_id: "tiff-4.0.9-44.71.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-64bit-4.0.9-44.71.1.aarch64_ilp32",
                        product: {
                           name: "libtiff-devel-64bit-4.0.9-44.71.1.aarch64_ilp32",
                           product_id: "libtiff-devel-64bit-4.0.9-44.71.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-64bit-4.0.9-44.71.1.aarch64_ilp32",
                        product: {
                           name: "libtiff5-64bit-4.0.9-44.71.1.aarch64_ilp32",
                           product_id: "libtiff5-64bit-4.0.9-44.71.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.9-44.71.1.i586",
                        product: {
                           name: "libtiff-devel-4.0.9-44.71.1.i586",
                           product_id: "libtiff-devel-4.0.9-44.71.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.9-44.71.1.i586",
                        product: {
                           name: "libtiff5-4.0.9-44.71.1.i586",
                           product_id: "libtiff5-4.0.9-44.71.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.9-44.71.1.i586",
                        product: {
                           name: "tiff-4.0.9-44.71.1.i586",
                           product_id: "tiff-4.0.9-44.71.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.9-44.71.1.ppc64le",
                        product: {
                           name: "libtiff-devel-4.0.9-44.71.1.ppc64le",
                           product_id: "libtiff-devel-4.0.9-44.71.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.9-44.71.1.ppc64le",
                        product: {
                           name: "libtiff5-4.0.9-44.71.1.ppc64le",
                           product_id: "libtiff5-4.0.9-44.71.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.9-44.71.1.ppc64le",
                        product: {
                           name: "tiff-4.0.9-44.71.1.ppc64le",
                           product_id: "tiff-4.0.9-44.71.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.9-44.71.1.s390",
                        product: {
                           name: "libtiff-devel-4.0.9-44.71.1.s390",
                           product_id: "libtiff-devel-4.0.9-44.71.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.9-44.71.1.s390",
                        product: {
                           name: "libtiff5-4.0.9-44.71.1.s390",
                           product_id: "libtiff5-4.0.9-44.71.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.9-44.71.1.s390",
                        product: {
                           name: "tiff-4.0.9-44.71.1.s390",
                           product_id: "tiff-4.0.9-44.71.1.s390",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.9-44.71.1.s390x",
                        product: {
                           name: "libtiff-devel-4.0.9-44.71.1.s390x",
                           product_id: "libtiff-devel-4.0.9-44.71.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff-devel-32bit-4.0.9-44.71.1.s390x",
                        product: {
                           name: "libtiff-devel-32bit-4.0.9-44.71.1.s390x",
                           product_id: "libtiff-devel-32bit-4.0.9-44.71.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.9-44.71.1.s390x",
                        product: {
                           name: "libtiff5-4.0.9-44.71.1.s390x",
                           product_id: "libtiff5-4.0.9-44.71.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-32bit-4.0.9-44.71.1.s390x",
                        product: {
                           name: "libtiff5-32bit-4.0.9-44.71.1.s390x",
                           product_id: "libtiff5-32bit-4.0.9-44.71.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.9-44.71.1.s390x",
                        product: {
                           name: "tiff-4.0.9-44.71.1.s390x",
                           product_id: "tiff-4.0.9-44.71.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libtiff-devel-4.0.9-44.71.1.x86_64",
                        product: {
                           name: "libtiff-devel-4.0.9-44.71.1.x86_64",
                           product_id: "libtiff-devel-4.0.9-44.71.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff-devel-32bit-4.0.9-44.71.1.x86_64",
                        product: {
                           name: "libtiff-devel-32bit-4.0.9-44.71.1.x86_64",
                           product_id: "libtiff-devel-32bit-4.0.9-44.71.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-4.0.9-44.71.1.x86_64",
                        product: {
                           name: "libtiff5-4.0.9-44.71.1.x86_64",
                           product_id: "libtiff5-4.0.9-44.71.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libtiff5-32bit-4.0.9-44.71.1.x86_64",
                        product: {
                           name: "libtiff5-32bit-4.0.9-44.71.1.x86_64",
                           product_id: "libtiff5-32bit-4.0.9-44.71.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "tiff-4.0.9-44.71.1.x86_64",
                        product: {
                           name: "tiff-4.0.9-44.71.1.x86_64",
                           product_id: "tiff-4.0.9-44.71.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP5",
                           product_id: "SUSE Linux Enterprise Server 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
            },
            product_reference: "libtiff-devel-4.0.9-44.71.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
            },
            product_reference: "libtiff-devel-4.0.9-44.71.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
            },
            product_reference: "libtiff-devel-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff-devel-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            },
            product_reference: "libtiff-devel-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
            },
            product_reference: "libtiff5-32bit-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
            },
            product_reference: "tiff-4.0.9-44.71.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
            },
            product_reference: "tiff-4.0.9-44.71.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
            },
            product_reference: "tiff-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
            },
            product_reference: "tiff-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
            },
            product_reference: "libtiff5-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
            },
            product_reference: "libtiff5-32bit-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libtiff5-32bit-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
            },
            product_reference: "libtiff5-32bit-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
            },
            product_reference: "tiff-4.0.9-44.71.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
            },
            product_reference: "tiff-4.0.9-44.71.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
            },
            product_reference: "tiff-4.0.9-44.71.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tiff-4.0.9-44.71.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
            },
            product_reference: "tiff-4.0.9-44.71.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2020-18768",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-18768",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-18768",
               url: "https://www.suse.com/security/cve/CVE-2020-18768",
            },
            {
               category: "external",
               summary: "SUSE Bug 1214574 for CVE-2020-18768",
               url: "https://bugzilla.suse.com/1214574",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-18768",
      },
      {
         cve: "CVE-2023-25433",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-25433",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-25433",
               url: "https://www.suse.com/security/cve/CVE-2023-25433",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212883 for CVE-2023-25433",
               url: "https://bugzilla.suse.com/1212883",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-25433",
      },
      {
         cve: "CVE-2023-26966",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-26966",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-26966",
               url: "https://www.suse.com/security/cve/CVE-2023-26966",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212881 for CVE-2023-26966",
               url: "https://bugzilla.suse.com/1212881",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-26966",
      },
      {
         cve: "CVE-2023-2908",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-2908",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-2908",
               url: "https://www.suse.com/security/cve/CVE-2023-2908",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212888 for CVE-2023-2908",
               url: "https://bugzilla.suse.com/1212888",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-2908",
      },
      {
         cve: "CVE-2023-3316",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-3316",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.\n\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-3316",
               url: "https://www.suse.com/security/cve/CVE-2023-3316",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212535 for CVE-2023-3316",
               url: "https://bugzilla.suse.com/1212535",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-3316",
      },
      {
         cve: "CVE-2023-3576",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-3576",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-3576",
               url: "https://www.suse.com/security/cve/CVE-2023-3576",
            },
            {
               category: "external",
               summary: "SUSE Bug 1213273 for CVE-2023-3576",
               url: "https://bugzilla.suse.com/1213273",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "low",
            },
         ],
         title: "CVE-2023-3576",
      },
      {
         cve: "CVE-2023-3618",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-3618",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-3618",
               url: "https://www.suse.com/security/cve/CVE-2023-3618",
            },
            {
               category: "external",
               summary: "SUSE Bug 1213274 for CVE-2023-3618",
               url: "https://bugzilla.suse.com/1213274",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-3618",
      },
      {
         cve: "CVE-2023-38288",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-38288",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** REJECT ** Not a Security Issue.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-38288",
               url: "https://www.suse.com/security/cve/CVE-2023-38288",
            },
            {
               category: "external",
               summary: "SUSE Bug 1213590 for CVE-2023-38288",
               url: "https://bugzilla.suse.com/1213590",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "low",
            },
         ],
         title: "CVE-2023-38288",
      },
      {
         cve: "CVE-2023-38289",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-38289",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** REJECT ** Not a Security Issue.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-38289",
               url: "https://www.suse.com/security/cve/CVE-2023-38289",
            },
            {
               category: "external",
               summary: "SUSE Bug 1213589 for CVE-2023-38289",
               url: "https://bugzilla.suse.com/1213589",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.71.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.71.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-11-06T08:52:20Z",
               details: "low",
            },
         ],
         title: "CVE-2023-38289",
      },
   ],
}

cve-2023-38288

Vulnerability from cvelistv5

Not a Security Issue.

Show details on NVD website

JSON

To clipboard

{
   containers: {
      cna: {
         providerMetadata: {
            dateUpdated: "2023-08-24T08:10:46.498Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         rejectedReasons: [
            {
               lang: "en",
               value: "Not a Security Issue.",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2023-38288",
      dateRejected: "2023-08-24T08:10:46.498Z",
      dateReserved: "2023-07-14T11:42:17.255Z",
      dateUpdated: "2023-08-24T08:10:46.498Z",
      state: "REJECTED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.0",
}

cve-2023-3316

Vulnerability from cvelistv5

Published

2023-06-19 11:10

Modified

2025-02-13 16:55

Severity ?

5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

References

▼	URL	Tags
	https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/
	https://gitlab.com/libtiff/libtiff/-/issues/515
	https://gitlab.com/libtiff/libtiff/-/merge_requests/468
	https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html

Impacted products

	Vendor	Product	Version
	libtiff	libtiff	Version: 3.9.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T06:55:02.573Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/issues/515",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/468",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-3316",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-09T21:09:26.352495Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-09T21:09:56.669Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "libtiff",
               vendor: "libtiff",
               versions: [
                  {
                     lessThan: "4.5.1",
                     status: "affected",
                     version: "3.9.0",
                     versionType: "git",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.</p>",
                  },
               ],
               value: "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476 NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-08-01T01:06:12.691Z",
            orgId: "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
            shortName: "JFROG",
         },
         references: [
            {
               url: "https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/",
            },
            {
               url: "https://gitlab.com/libtiff/libtiff/-/issues/515",
            },
            {
               url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/468",
            },
            {
               url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.",
      },
   },
   cveMetadata: {
      assignerOrgId: "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
      assignerShortName: "JFROG",
      cveId: "CVE-2023-3316",
      datePublished: "2023-06-19T11:10:41.964Z",
      dateReserved: "2023-06-19T10:42:23.466Z",
      dateUpdated: "2025-02-13T16:55:04.700Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-18768

Vulnerability from cvelistv5

Published

2023-08-22 00:00

Modified

2024-10-04 16:36

Severity ?

Summary

There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.

References

▼	URL	Tags
	http://bugzilla.maptools.org/show_bug.cgi?id=2848

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T14:08:30.461Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://bugzilla.maptools.org/show_bug.cgi?id=2848",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2020-18768",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-04T16:35:49.864320Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-04T16:36:53.098Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-08-22T15:44:19.666709",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "http://bugzilla.maptools.org/show_bug.cgi?id=2848",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-18768",
      datePublished: "2023-08-22T00:00:00",
      dateReserved: "2020-08-13T00:00:00",
      dateUpdated: "2024-10-04T16:36:53.098Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-25433

Vulnerability from cvelistv5

Published

2023-06-29 00:00

Modified

2024-11-27 14:30

Severity ?

Summary

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.

References

▼	URL	Tags
	https://gitlab.com/libtiff/libtiff/-/issues/520
	https://gitlab.com/libtiff/libtiff/-/merge_requests/467
	https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T11:18:36.338Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/issues/520",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/467",
               },
               {
                  name: "[debian-lts-announce] 20230731 [SECURITY] [DLA 3513-1] tiff security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-25433",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-27T14:30:31.790486Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-27T14:30:45.902Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-08-01T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://gitlab.com/libtiff/libtiff/-/issues/520",
            },
            {
               url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/467",
            },
            {
               name: "[debian-lts-announce] 20230731 [SECURITY] [DLA 3513-1] tiff security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-25433",
      datePublished: "2023-06-29T00:00:00",
      dateReserved: "2023-02-06T00:00:00",
      dateUpdated: "2024-11-27T14:30:45.902Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-26966

Vulnerability from cvelistv5

Published

2023-06-29 00:00

Modified

2024-11-27 15:42

Severity ?

Summary

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

References

▼	URL	Tags
	https://gitlab.com/libtiff/libtiff/-/issues/530
	https://gitlab.com/libtiff/libtiff/-/merge_requests/473
	https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T12:01:31.820Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/issues/530",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/473",
               },
               {
                  name: "[debian-lts-announce] 20230731 [SECURITY] [DLA 3513-1] tiff security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-26966",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-27T15:42:13.107092Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-27T15:42:22.047Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-08-01T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://gitlab.com/libtiff/libtiff/-/issues/530",
            },
            {
               url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/473",
            },
            {
               name: "[debian-lts-announce] 20230731 [SECURITY] [DLA 3513-1] tiff security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-26966",
      datePublished: "2023-06-29T00:00:00",
      dateReserved: "2023-02-27T00:00:00",
      dateUpdated: "2024-11-27T15:42:22.047Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-38289

Vulnerability from cvelistv5

Not a Security Issue.

Show details on NVD website

JSON

To clipboard

{
   containers: {
      cna: {
         providerMetadata: {
            dateUpdated: "2023-08-24T08:11:14.459Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         rejectedReasons: [
            {
               lang: "en",
               value: "Not a Security Issue.",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2023-38289",
      dateRejected: "2023-08-24T08:11:14.459Z",
      dateReserved: "2023-07-14T11:42:17.255Z",
      dateUpdated: "2023-08-24T08:11:14.459Z",
      state: "REJECTED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.0",
}

cve-2023-2908

Vulnerability from cvelistv5

Published

2023-06-30 00:00

Modified

2024-10-28 13:04

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.

References

▼	URL	Tags
	https://access.redhat.com/security/cve/CVE-2023-2908
	https://bugzilla.redhat.com/show_bug.cgi?id=2218830
	https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f
	https://gitlab.com/libtiff/libtiff/-/merge_requests/479
	https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
	https://security.netapp.com/advisory/ntap-20230731-0004/

Impacted products

Vendor

Product

Version

▼

n/a

Libtiff

Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Fedora	Fedora
Fedora	Fedora
Fedora	Fedora
Fedora	Fedora

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T06:41:03.535Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-2908",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2218830",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/479",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230731-0004/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-2908",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-28T13:04:03.459315Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-28T13:04:20.389Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Libtiff",
               vendor: "n/a",
               versions: [
                  {
                     status: "unaffected",
                     version: "4.5.1rc1",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:6",
               ],
               defaultStatus: "unaffected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 6",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unaffected",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unaffected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "unaffected",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "unaffected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "unaffected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "tkimg",
               product: "Fedora",
               vendor: "Fedora",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "iv",
               product: "Fedora",
               vendor: "Fedora",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "libtiff",
               product: "Fedora",
               vendor: "Fedora",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "mingw-libtiff",
               product: "Fedora",
               vendor: "Fedora",
            },
         ],
         datePublic: "2023-06-30T00:00:00+00:00",
         descriptions: [
            {
               lang: "en",
               value: "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Low",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-23T01:44:14.895Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               url: "https://access.redhat.com/security/cve/CVE-2023-2908",
            },
            {
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2218830",
            },
            {
               url: "https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f",
            },
            {
               url: "https://gitlab.com/libtiff/libtiff/-/merge_requests/479",
            },
            {
               url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230731-0004/",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2023-05-26T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2023-06-30T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "Libtiff: null pointer dereference in tif_dir.c",
         x_redhatCweChain: "CWE-476: NULL Pointer Dereference",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2023-2908",
      datePublished: "2023-06-30T00:00:00",
      dateReserved: "2023-05-26T00:00:00",
      dateUpdated: "2024-10-28T13:04:20.389Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-3618

Vulnerability from cvelistv5

Published

2023-07-12 14:06

Modified

2024-09-26 19:26

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

References

▼	URL	Tags
	https://access.redhat.com/security/cve/CVE-2023-3618	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2215865	issue-tracking, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
	https://security.netapp.com/advisory/ntap-20230824-0012/
	https://support.apple.com/kb/HT214038
	https://support.apple.com/kb/HT214036
	https://support.apple.com/kb/HT214037

Impacted products

Vendor

Product

Version

▼

n/a

libtiff

Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Fedora	Fedora
Fedora	Fedora
Fedora	Fedora
Fedora	Fedora

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T07:01:56.851Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-3618",
               },
               {
                  name: "RHBZ#2215865",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2215865",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230824-0012/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT214038",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT214036",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT214037",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-3618",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-09-26T19:26:00.978317Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-26T19:26:31.776Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "affected",
               product: "libtiff",
               vendor: "n/a",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:6",
               ],
               defaultStatus: "unknown",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 6",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "affected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "iv",
               product: "Fedora",
               vendor: "Fedora",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "libtiff",
               product: "Fedora",
               vendor: "Fedora",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "affected",
               packageName: "mingw-libtiff",
               product: "Fedora",
               vendor: "Fedora",
            },
            {
               collectionURL: "https://packages.fedoraproject.org/",
               defaultStatus: "unaffected",
               packageName: "tkimg",
               product: "Fedora",
               vendor: "Fedora",
            },
         ],
         datePublic: "2023-02-13T00:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-120",
                     description: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-07-15T00:27:54.327174Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2023-3618",
            },
            {
               name: "RHBZ#2215865",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2215865",
            },
            {
               url: "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230824-0012/",
            },
            {
               url: "https://support.apple.com/kb/HT214038",
            },
            {
               url: "https://support.apple.com/kb/HT214036",
            },
            {
               url: "https://support.apple.com/kb/HT214037",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2023-06-19T00:00:00Z",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2023-02-13T00:00:00Z",
               value: "Made public.",
            },
         ],
         title: "Segmentation fault in fax3encode in libtiff/tif_fax3.c",
         x_redhatCweChain: "CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2023-3618",
      datePublished: "2023-07-12T14:06:04.572Z",
      dateReserved: "2023-07-11T14:46:05.545Z",
      dateUpdated: "2024-09-26T19:26:31.776Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-3576

Vulnerability from cvelistv5

Published

2023-10-04 18:02

Modified

2024-11-23 00:18

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2023:6575	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2023-3576	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2219340	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Red Hat

Red Hat Enterprise Linux 9

Unaffected: 0:4.4.0-10.el9   < *
    cpe:/a:redhat:enterprise_linux:9::crb
    cpe:/a:redhat:enterprise_linux:9::appstream

Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T07:01:55.939Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2023:6575",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2023:6575",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-3576",
               },
               {
                  name: "RHBZ#2219340",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2219340",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::crb",
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:4.4.0-10.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:6",
               ],
               defaultStatus: "unknown",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 6",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "libtiff",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "mingw-libtiff",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "affected",
               packageName: "compat-libtiff3",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
         ],
         datePublic: "2023-03-07T00:00:00+00:00",
         descriptions: [
            {
               lang: "en",
               value: "A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-119",
                     description: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-23T00:18:42.787Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2023:6575",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2023:6575",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2023-3576",
            },
            {
               name: "RHBZ#2219340",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2219340",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2023-03-09T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2023-03-07T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "Libtiff: memory leak in tiffcrop.c",
         x_redhatCweChain: "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2023-3576",
      datePublished: "2023-10-04T18:02:23.926Z",
      dateReserved: "2023-07-10T09:16:33.670Z",
      dateUpdated: "2024-11-23T00:18:42.787Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature