CVE-2021-38714
published 2021-08-24CVE-2021-38714: In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA()…
PriorityP346high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
2.92%
85.3th percentile
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | plib | < plib 1.8.5-10 (bookworm) | plib 1.8.5-10 (bookworm) |
| fedoraproject | extra_packages_for_enterprise_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| plib_project | plib | <= 1.8.5 | — |
| plib_project | plib | >= 0 < 1.8.5-8+deb11u1 | 1.8.5-8+deb11u1 |
| plib_project | plib | >= 0 < 1.8.5-10 | 1.8.5-10 |
| plib_project | plib | >= 0 < 1.8.5-10 | 1.8.5-10 |
| plib_project | plib | >= 0 < 1.8.5-10 | 1.8.5-10 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv8.8HIGH
vendor_debian8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
PLIB vulnerability
vendor_ubuntu·2023-09-07
CVE-2021-38714 PLIB vulnerability
Title: PLIB vulnerability
Summary: PLIB could be made to execute arbitrary code if it opens a specially
crafted TGA file.
Wooseok Kang discovered that PLIB did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted TGA file, an attacker could possibly use this issue to cause
applications using PLIB to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2021-38714: plib - In Plib through 1.85, there is an integer overflow vulnerability that could resu...
vendor_debian·2021·CVSS 8.8
CVE-2021-38714 [HIGH] CVE-2021-38714: plib - In Plib through 1.85, there is an integer overflow vulnerability that could resu...
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.
Scope: local
bookworm: resolved (fixed in 1.8.5-10)
bullseye: resolved (fixed in 1.8.5-8+deb11u1)
forky: resolved (fixed in 1.8.5-10)
sid: resolved (fixed in 1.8.5-10)
trixie: resolved (fixed in 1.8.5-10)
GHSA
GHSA-8593-h9pq-2qm4: In Plib through 1
ghsa_unreviewed·2022-05-24
CVE-2021-38714 [HIGH] CWE-190 GHSA-8593-h9pq-2qm4: In Plib through 1
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.
OSV
CVE-2021-38714: In Plib through 1
osv·2021-08-24·CVSS 8.8
CVE-2021-38714 [HIGH] CVE-2021-38714: In Plib through 1
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://lists.debian.org/debian-lts-announce/2021/10/msg00000.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HT3BKNAXLDY246UPUNRSBPGGVANRDOU/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTVSAKNCEYVMVAURQSB5GNA2MWL4XDPH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5SML6W6Z2B6THT76VPUKUFYQJABODFU/https://sourceforge.net/p/plib/bugs/55/https://lists.debian.org/debian-lts-announce/2021/10/msg00000.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HT3BKNAXLDY246UPUNRSBPGGVANRDOU/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTVSAKNCEYVMVAURQSB5GNA2MWL4XDPH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5SML6W6Z2B6THT76VPUKUFYQJABODFU/https://sourceforge.net/p/plib/bugs/55/
2021-08-24
Published