Is CVE-2023-52356 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-52356 being exploited in the wild.

How severe is CVE-2023-52356?

High severity, with a CVSS score of 7.5, published 25 January 2024.

Which products and versions are affected?

Red Hat Enterprise Linux 8 8.10; Red Hat Enterprise Linux 9 9.7.

Is there a fix for CVE-2023-52356?

A patch was published on 2024-08-07: Red Hat released security updates for RHEL 8 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2023-52356 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2023-52356?

Check whether you run Red Hat Enterprise Linux 8 or Red Hat Enterprise Linux 9 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-52356: libtiff heap buffer overflow in TIFFReadRGBATileExt

CVE-2023-52356 · Severity: high · CVSS 7.5 · Published 2024-01-25

A vulnerability was found in libtiff, a widely used library for processing TIFF image files. By providing a specially crafted image file, an attacker can cause the software to crash. This results in a denial of service, potentially disrupting applications or systems that automatically process image uploads or attachments.

Technologies: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9. Vendors: Red Hat.

Quick answers

Is CVE-2023-52356 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-52356 being exploited in the wild.
How severe is CVE-2023-52356?: High severity, with a CVSS score of 7.5, published 25 January 2024.
Which products and versions are affected?: Red Hat Enterprise Linux 8 8.10; Red Hat Enterprise Linux 9 9.7.
Is there a fix for CVE-2023-52356?: A patch was published on 2024-08-07: Red Hat released security updates for RHEL 8 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2023-52356 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2023-52356?: Check whether you run Red Hat Enterprise Linux 8 or Red Hat Enterprise Linux 9 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A segmentation fault (SEGV) flaw exists in libtiff within the TIFFReadRGBATileExt() API. The vulnerability is triggered when the library processes a maliciously crafted TIFF file, leading to a heap-based buffer overflow. This is an out-of-bounds write vulnerability (CWE-787/CWE-122). An attacker can exploit this remotely without authentication or user interaction to cause a denial of service (DoS) by crashing the application linked against libtiff. Patches have been released by the libtiff maintainers and various Linux distributions including Red Hat and Debian.

Affected products

libtiff libtiff 4.0.9, 4.4.0
Red Hat Enterprise Linux 8 8.10
Red Hat Enterprise Linux 9 9.7

Timeline

2024-01-25: disclosed: Initial NVD publication date
2024-08-07: patched: Red Hat released security updates for RHEL 8
2025-11-11: patched: Red Hat released security updates for RHEL 9

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.