Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-3463

20
FAUCET Score

CVE-2006-3463 describes a denial-of-service vulnerability in the libtiff library, specifically affecting versions prior to 3.8.2. An attacker can trigger an infinite loop by providing a maliciously crafted TIFF file with a large td_nstrips value, due to an integer overflow in the EstimateStripByteCounts function. This vulnerability has a CVSS score of 7.8 (High), indicating it can be exploited remotely with low attack complexity to cause a complete denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 3.8.1CPE matchmatch criteria
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.8HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
2.73%
Probability of exploitation in next 30 days
EPSS Percentile
84.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0273 is in the 72nd percentile among its peer group of 51,553 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

debianpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: libtiff-0:3.5.7-25.el3.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: kdegraphics-7:3.1.3-3.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: libtiff-0:3.6.1-12
View patch

Vendor Advisories (1)

redhatCVE-2006-3463Important

Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

Aug 1, 2006

References

patches.sgi.com / support/free/security/advisories/20060801-01-P
patches.sgi.com / support/free/security/advisories/20060901-01-P.asc
lwn.net / Alerts/194228
secunia.com / advisories/21274
Vendor Advisory
secunia.com / advisories/21290
Vendor Advisory
secunia.com / advisories/21304
Vendor Advisory
secunia.com / advisories/21319
Vendor Advisory
secunia.com / advisories/21334
Vendor Advisory
secunia.com / advisories/21338
Vendor Advisory
secunia.com / advisories/21346
Vendor Advisory
secunia.com / advisories/21370
Vendor Advisory
secunia.com / advisories/21392
Vendor Advisory
secunia.com / advisories/21501
Vendor Advisory
secunia.com / advisories/21537
Vendor Advisory
secunia.com / advisories/21598
Vendor Advisory
secunia.com / advisories/21632
Vendor Advisory
secunia.com / advisories/22036
Vendor Advisory
secunia.com / advisories/27181
Vendor Advisory
secunia.com / advisories/27222
Vendor Advisory
secunia.com / advisories/27832
Vendor Advisory
securitytracker.com / id
issues.rpath.com / browse/RPL-558
slackware.com / security/viewer.php
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639
sunsolve.sun.com / search/document.do
sunsolve.sun.com / search/document.do
support.avaya.com / elmodocs2/security/ASA-2006-166.htm
debian.org / security/2006/dsa-1137
PatchVendor Advisory
gentoo.org / security/en/glsa/glsa-200608-07.xml
mandriva.com / security/advisories
mandriva.com / security/advisories
novell.com / linux/security/advisories/2006_44_libtiff.html
redhat.com / support/errata/RHSA-2006-0603.html
redhat.com / support/errata/RHSA-2006-0648.html
securityfocus.com / bid/19284
ubuntu.com / usn/usn-330-1
vupen.com / english/advisories/2006/3105
Vendor Advisory
vupen.com / english/advisories/2007/3486
Vendor Advisory
vupen.com / english/advisories/2007/4034
Vendor Advisory