CVE-2023-3618: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

Affected products

• Debian Debian Linux: version 10.0 only
• Libtiff Libtiff: before 4.5.1 (fixed in 4.5.1)
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2023-07-12. Last modified 2026-06-17.