CVE:CVE-2023-2731
CNNVD:CNNVD-202305-1723
LibTIFF是一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。
LibTIFF 存在代码问题漏洞，该漏洞源于在LZWDecode()函数中发现了NULL指针取消引用问题，导致程序崩溃或拒绝服务。
solution:Upgrade libtiff libtiff to a higher version than 4.5.0,and avoid the version (,4.5.0); Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38; Upgrade redhat enterprise_linux to a higher version than 9.0,and avoid the version 9.0