CVE-2023-25435

Medium

Advisory

Published 21 Jun 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 72; of 17,781 indexed, latest versions
Container images: 76; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 76 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+17 more	4.0.3-7ubuntu0.11+esm7, 4.0.6-1ubuntu0.8+esm10, 4.0.9-5ubuntu0.10, 4.1.0+git191117-2ubuntu0.20.04.8+1 more	76

OSV records: UBUNTU-CVE-2023-25435

Charts affected

72 by stars

Chart

Latest

Affected images

Radar Score

puppeteergeek-cookbook

1.2.2

1 of 1 See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

15,730

seafilegeek-cookbook

3.2.0

1 of 1 See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

24,293

teedygeek-cookbook

6.2.0

1 of 1 See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
sismics/docs :v1.10	f4b0ef019cf1	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10

Open the chart page →

26,944

xtevegeek-cookbook

8.4.2

1 of 1 See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

17,929

7dtdhelm-7dtd

0.1.0

1 of 1 See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	tiff@4.0.9-5ubuntu0.9	4.0.9-5ubuntu0.10

Open the chart page →

10,627

itm-servicesintel

2.0.0

1 of 8 See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

18,066

multimodal-data-visualizationintel

3.0.0

1 of 2 See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

11,069

elastictranscoderluiscajl

0.46.0

2 of 4 See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
elastictranscoder/transcoder :627e21dc	b4a0327029e6	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10

Open the chart page →

58,160

cameramedia-streaming-mesh

0.2.5

2 of 3 See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8
ciscolabs/rtsp-server :latest	b59fc10bb821	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

18,608

msm-rtspmedia-streaming-mesh

0.0.2

2 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8
ciscolabs/rtsp-server :latest	b59fc10bb821	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

18,608

rtspmedia-streaming-mesh

0.0.14

2 of 2 See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8
ciscolabs/rtsp-server :latest	b59fc10bb821	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

18,608

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

22,658

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	tiff@4.0.9-5ubuntu0.3	4.0.9-5ubuntu0.10

Open the chart page →

27,633

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	tiff@4.0.6-1ubuntu0.5	4.0.6-1ubuntu0.8+esm10

Open the chart page →

63,223

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	tiff@4.0.6-1ubuntu0.5	4.0.6-1ubuntu0.8+esm10

Open the chart page →

42,614

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	tiff@4.0.6-1ubuntu0.5	4.0.6-1ubuntu0.8+esm10

Open the chart page →

29,124

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	tiff@4.0.3-7ubuntu0.9	4.0.3-7ubuntu0.11+esm7

Open the chart page →

26,339

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	tiff@4.1.0+git191117-2ubuntu0.20.04.4	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

22,084

podnat-state-storepodnat-controller

0.3.2

1 of 1 See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

9,167

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

15,520

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8

Open the chart page →

30,687

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-25435.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	tiff@4.3.0-6	4.3.0-6ubuntu0.4
xeladock/nginx2 :latest	c259a67b1dff	tiff@4.3.0-6	4.3.0-6ubuntu0.4

Open the chart page →

17,461

Container images carrying it

76 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	tiff@4.0.6-1ubuntu0.4	4.0.6-1ubuntu0.8+esm10	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm10	4
ciscolabs/rtsp-client :latest	a7b60ec88285	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8	3
ciscolabs/rtsp-server :latest	b59fc10bb821	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	tiff@4.0.6-1ubuntu0.5	4.0.6-1ubuntu0.8+esm10	3
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	tiff@4.3.0-6ubuntu0.1	4.3.0-6ubuntu0.4	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	2
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.8	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	1
cheyang/distributed-tf :1.6.0	46cc34755493	tiff@4.0.6-1ubuntu0.2	4.0.6-1ubuntu0.8+esm10	1
daskdev/dask-notebook :1.1.0	052630f5ca04	tiff@4.0.9-5ubuntu0.1	4.0.9-5ubuntu0.10	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	tiff@4.0.3-7ubuntu0.9	4.0.3-7ubuntu0.11+esm7	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	tiff@4.0.9-5ubuntu0.3	4.0.9-5ubuntu0.10	1
haveagitgat/tdarr :2.00.18	1256348872ce	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.8	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	tiff@4.1.0+git191117-2build1	4.1.0+git191117-2ubuntu0.20.04.8	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	tiff@4.0.9-5ubuntu0.3	4.0.9-5ubuntu0.10	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	tiff@4.0.6-1ubuntu0.4	4.0.6-1ubuntu0.8+esm10	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	1
linuxserver/deluge :18.04.1	0ac871624394	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
mediagis/nominatim :3.7	c15e941485ef	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8	1
nethermind/nethermind :1.14.6	15517708c3b6	tiff@4.3.0-6ubuntu0.2	4.3.0-6ubuntu0.4	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10	1
opendatacube/restcube :latest	91870111837c	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10	1
opendatacube/wms :latest	1b90cdf68831	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10	1
openelevation/open-elevation :latest	82fb21612e86	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	1
openkm/openkm-ce :6.3.11	3bc465a7461b	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	tiff@4.0.3-7ubuntu0.9	4.0.3-7ubuntu0.11+esm7	1
photoprism/photoprism :220629-jammy	2954334adbda	tiff@4.3.0-6	4.3.0-6ubuntu0.4	1
project2team4/react :latest	3ff031a08887	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.8	1
scrapinghub/splash :3.4.1	a5f89bc84606	tiff@4.0.9-5ubuntu0.3	4.0.9-5ubuntu0.10	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	tiff@4.1.0+git191117-2ubuntu0.20.04.7	4.1.0+git191117-2ubuntu0.20.04.8	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	tiff@4.1.0+git191117-2ubuntu0.20.04.4	4.1.0+git191117-2ubuntu0.20.04.8	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	1
sismics/docs :v1.10	f4b0ef019cf1	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10	1
snipe/snipe-it :v6.0.14	55fb7636a98c	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.8	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.8	1
stashapp/stash :latest	24dbd7607174	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	tiff@4.0.6-1ubuntu0.2	4.0.6-1ubuntu0.8+esm10	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.4	1