CVE-2021-38714: Integer Overflow
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/plibto a version that resolves this vulnerability.Fixed in 1.8.5-8+deb10u1Fixed in 1.8.5-8+deb11u1Fixed in 1.8.5-14 - Upgrade
Upgrade
ubuntu/plibto a version that resolves this vulnerability.Fixed in 1.8.5-8ubuntu0.18.04.1~ - Upgrade
Upgrade
ubuntu/plibto a version that resolves this vulnerability.Fixed in 1.8.5-8ubuntu0.20.04.1 - Upgrade
Upgrade
ubuntu/plibto a version that resolves this vulnerability.Fixed in 1.8.5-7ubuntu0.1~
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-38714.
What is the severity of CVE-2021-38714?
The severity of CVE-2021-38714 is not specified in the provided information.
How does CVE-2021-38714 occur?
CVE-2021-38714 occurs due to an integer overflow vulnerability in the ssgLoadTGA() function in the src/ssg/ssgLoadTGA.cxx file of Plib.
Which software versions are affected by CVE-2021-38714?
Versions 1.8.5-8ubuntu0.18.04.1~, 1.8.5-8ubuntu0.20.04.1, 1.8.5-7ubuntu0.1~, 1.8.5-8+deb10u1, 1.8.5-8+deb11u1, and 1.8.5-14 of Plib are affected by CVE-2021-38714.
How can I fix CVE-2021-38714?
To fix CVE-2021-38714, update Plib to versions 1.8.5-8ubuntu0.18.04.1~ (for Ubuntu 18.04), 1.8.5-8ubuntu0.20.04.1 (for Ubuntu 20.04), 1.8.5-7ubuntu0.1~ (for Ubuntu Xenial), 1.8.5-8+deb10u1 or 1.8.5-8+deb11u1 (for Debian), or 1.8.5-14 (for Debian).