CVE-2021-28021: Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

PriorityP434high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

1.33%

68.0th percentile

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	libstb	< libstb 0.0~git20220908.8b5f1f3+ds-1 (bookworm)	libstb 0.0~git20220908.8b5f1f3+ds-1 (bookworm)
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
stb_project	stb	—	—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

osv7.8HIGH

vendor_debian7.8HIGH

vendor_redhat7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M2 (CVE-2020-28021)

suricata·2021-05-04·CVSS 8.8

CVE-2020-28021 [HIGH] ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M2 (CVE-2020-28021) ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M2 (CVE-2020-28021) Rule: alert smtp any any -> [$HOME_NET,$HTTP_SERVERS,$SMTP_SERVERS] any (msg:"ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M2 (CVE-2020-28021)"; flow:established,to_server; content:"MAIL|20|FROM"; content:"AUTH="; distance:0; pcre:"/^[^\+]+(?:\+[A-F0-9]{2}){4,}/R"; content:"+0A"; fast_pattern; reference:url,www.qualys.com/2021/05/04/21nails/21nails.txt; reference:cve,2020-28021; classtype:attempted-admin; sid:2032901; rev:1; metadata:attack_target SMTP_Server, created_at 2021_05_04, cve CVE_2020_28021, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_05_04;)

Suricata

ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound - Information Disclosure Attempt (CVE-2020-28021)

suricata·2021-05-04·CVSS 8.8

CVE-2020-28021 [HIGH] ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound - Information Disclosure Attempt (CVE-2020-28021) ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound - Information Disclosure Attempt (CVE-2020-28021) Rule: alert smtp any any -> [$HOME_NET,$HTTP_SERVERS,$SMTP_SERVERS] any (msg:"ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound - Information Disclosure Attempt (CVE-2020-28021)"; flow:established,to_server; content:"MAIL|20|FROM"; content:"AUTH="; distance:0; pcre:"/^.{0,100}\+0A.{0,100}\x40/R"; content:"+0A"; fast_pattern; content:"|40|"; reference:url,www.qualys.com/2021/05/04/21nails/21nails.txt; reference:cve,2020-28021; classtype:attempted-admin; sid:2032902; rev:1; metadata:attack_target SMTP_Server, created_at 2021_05_04, cve CVE_2020_28021, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Description_Generated

Suricata

ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M1 (CVE-2020-28021)

suricata·2021-05-04·CVSS 8.8

CVE-2020-28021 [HIGH] ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M1 (CVE-2020-28021) ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M1 (CVE-2020-28021) Rule: alert smtp any any -> [$HOME_NET,$HTTP_SERVERS,$SMTP_SERVERS] any (msg:"ET EXPLOIT Exim New-Line Injection into Spool Header File Inbound M1 (CVE-2020-28021)"; flow:established,to_server; content:"MAIL|20|FROM"; content:"AUTH="; distance:0; pcre:"/^[^\+]+\+0A/R"; content:"+0A"; fast_pattern; reference:url,www.qualys.com/2021/05/04/21nails/21nails.txt; reference:cve,2020-28021; classtype:attempted-admin; sid:2032900; rev:1; metadata:attack_target SMTP_Server, created_at 2021_05_04, cve CVE_2020_28021, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_05_04;)