Vulnerability Name: | CVE-2021-38714 (CCN-208134) | ||||||||||||
Assigned: | 2021-04-03 | ||||||||||||
Published: | 2021-04-03 | ||||||||||||
Updated: | 2022-09-02 | ||||||||||||
Summary: | In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file. | ||||||||||||
CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)
6.9 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)
| ||||||||||||
CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
| ||||||||||||
Vulnerability Type: | CWE-190 | ||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2021-38714 Source: XF Type: UNKNOWN plib-cve202138714-code-exec(208134) Source: MLIST Type: Mailing List, Third Party Advisory [debian-lts-announce] 20211002 [SECURITY] [DLA 2775-1] plib security update Source: FEDORA Type: Mailing List, Patch, Third Party Advisory FEDORA-2022-bcc0df5180 Source: FEDORA Type: Mailing List, Patch, Third Party Advisory FEDORA-2022-1cf3c9578f Source: FEDORA Type: Mailing List, Third Party Advisory FEDORA-2022-08022e9452 Source: CCN Type: SourceForge Plib Project #55 integer overflow for maliciously crafted tga file Source: MISC Type: Exploit, Third Party Advisory https://sourceforge.net/p/plib/bugs/55/ Source: CCN Type: WhiteSource Vulnerability Database CVE-2021-38714 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration 3: Configuration CCN 1: ![]() | ||||||||||||
Oval Definitions | |||||||||||||
| |||||||||||||
BACK |