CVE-2023-38288
NoneCVSS
—
EPSS
—
Published
Aug 24, 2023
CISA due date
—
Cloudanix analysis
A reported problem was reviewed and officially determined not to be a security concern of any kind.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
The reported issue does not constitute a security vulnerability and has no technical security impact on any systems or products.
Why it matters to the business
No operational or business consequences exist because the CVE was rejected as not a security issue, requiring no resources or urgency.
How an attack unfolds
No attacker can exploit this entry because it is not a security flaw; the CVE was formally rejected.
How to fix it
No fixes, patches, or mitigations are required or available; the entry requires no action.
How to confirm the fix worked
Confirm the rejected status directly in the official CVE database or NVD record to verify no exposure exists.
Typical attack path
- N/A - entry rejected as not a security issue
How to detect it
No logging, monitoring, or forensic review is needed because no vulnerability or exploitation path exists.
What your security team should do
- Document the rejection in vulnerability tracking systems
- Exclude from scanning or prioritization lists
- Monitor for any future re-evaluation of the entry
The record
Rejected reason: Not a Security Issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Micro 5.2 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.2 | tiff | 0 | 4.0.9-150000.45.41.1 |
| SUSE:Linux Enterprise Micro 5.3 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.3 | tiff | 0 | 4.0.9-150000.45.41.1 |
| SUSE:Linux Enterprise Micro 5.4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.4 | tiff | 0 | 4.0.9-150000.45.41.1 |
| SUSE:Linux Enterprise Micro 5.5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.5 | tiff | 0 | 4.0.9-150000.45.41.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | tiff | 0 | 4.0.9-150000.45.41.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP5 | tiff | 0 | 4.0.9-150000.45.41.1 |
| SUSE:Linux Enterprise Server 12 SP5 | tiff | 0 | 4.0.9-44.71.1 |
| SUSE:Linux Enterprise Server 12 SP5 | tiff | 0 | 4.0.9-44.80.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | tiff | 0 | 4.0.9-44.71.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | tiff | 0 | 4.0.9-44.80.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | tiff | 0 | 4.0.9-44.71.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | tiff | 0 | 4.0.9-44.80.1 |
| Ubuntu:20.04:LTS | tiff | 0 | 4.1.0+git191117-2ubuntu0.20.04.9 |
| Ubuntu:22.04:LTS | tiff | 0 | 4.3.0-6ubuntu0.5 |
| Ubuntu:Pro:14.04:LTS | tiff | 0 | 4.0.3-7ubuntu0.11+esm9 |
| Ubuntu:Pro:16.04:LTS | tiff | 0 | 4.0.6-1ubuntu0.8+esm12 |
| Ubuntu:Pro:18.04:LTS | tiff | 0 | 4.0.9-5ubuntu0.10+esm2 |
| openSUSE:Leap 15.4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap 15.5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap 15.5 | tiff | 0 | 4.0.9-150000.45.41.1 |
| openSUSE:Leap Micro 5.3 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap Micro 5.3 | tiff | 0 | 4.0.9-150000.45.41.1 |
| openSUSE:Leap Micro 5.4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap Micro 5.4 | tiff | 0 | 4.0.9-150000.45.41.1 |
Related vulnerabilities
- CVE-2025-9900 A flaw was found in Libtiff. Also affects tiff
- CVE-2023-52356 A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a… Also affects tiff
- CVE-2023-3576 A memory leak flaw was found in Libtiff's tiffcrop utility. Also affects tiff
- CVE-2023-38289 Rejected reason: Not a Security Issue. Also affects tiff
- CVE-2017-17095 tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of… Also affects tiff
- CVE-2015-8668 Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in… Also affects tiff
- CVE-2023-52355 An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted… Also affects tiff
- CVE-2023-6277 An out-of-memory flaw was found in libtiff. Also affects tiff