CVE-2021-38714
Fixed in a distro release EPSS 3%
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.
Products: plib_project plib, debian_linux, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | plib | 1.8.5-10 |
| Debian 13 | plib | 1.8.5-10 |
| Debian 14 | plib | 1.8.5-10 |
| Debian 9 | plib | 1.8.5-7+deb9u1 |
| Ubuntu 20.04 LTS | plib | 1.8.5-8ubuntu0.20.04.1 |
| Ubuntu Pro 16.04 LTS | plib | 1.8.5-7ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | plib | 1.8.5-8ubuntu0.18.04.1~esm1 |