CVE-2023-38289
NoneCVSS
—
EPSS
—
Published
Aug 24, 2023
CISA due date
—
Cloudanix analysis
A reported problem was checked and found not to be a security issue at all, so nothing needs to be done.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
This CVE was rejected and is explicitly not a security issue, resulting in zero technical impact or vulnerability.
Why it matters to the business
No operational or business consequences exist because the entry does not represent any flaw or risk in affected products.
How an attack unfolds
No attacker can exploit this entry because it was rejected as not constituting a security vulnerability.
How to fix it
No fixes or mitigations are required or available.
How to confirm the fix worked
Verify the rejected status directly in the official CVE database or NVD record.
How to detect it
No logging, monitoring, or forensic checks are warranted because this is not a vulnerability.
What your security team should do
- Take no action on this entry.
- Monitor future CVE assignments for the same component if applicable.
The record
Rejected reason: Not a Security Issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Micro 5.2 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.3 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Micro 5.5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| SUSE:Linux Enterprise Server 12 SP5 | tiff | 0 | 4.0.9-44.71.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | tiff | 0 | 4.0.9-44.71.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | tiff | 0 | 4.0.9-44.71.1 |
| Ubuntu:20.04:LTS | tiff | 0 | 4.1.0+git191117-2ubuntu0.20.04.9 |
| Ubuntu:22.04:LTS | tiff | 0 | 4.3.0-6ubuntu0.5 |
| Ubuntu:Pro:14.04:LTS | tiff | 0 | 4.0.3-7ubuntu0.11+esm9 |
| Ubuntu:Pro:16.04:LTS | tiff | 0 | 4.0.6-1ubuntu0.8+esm12 |
| Ubuntu:Pro:18.04:LTS | tiff | 0 | 4.0.9-5ubuntu0.10+esm2 |
| openSUSE:Leap 15.4 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap 15.5 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap Micro 5.3 | tiff | 0 | 4.0.9-150000.45.32.1 |
| openSUSE:Leap Micro 5.4 | tiff | 0 | 4.0.9-150000.45.32.1 |
Related vulnerabilities
- CVE-2025-9900 A flaw was found in Libtiff. Also affects tiff
- CVE-2023-52356 A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a… Also affects tiff
- CVE-2023-3576 A memory leak flaw was found in Libtiff's tiffcrop utility. Also affects tiff
- CVE-2023-38288 Rejected reason: Not a Security Issue. Also affects tiff
- CVE-2017-17095 tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of… Also affects tiff
- CVE-2015-8668 Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in… Also affects tiff
- CVE-2023-52355 An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted… Also affects tiff
- CVE-2023-6277 An out-of-memory flaw was found in libtiff. Also affects tiff