Summary
Wooseok Kang discovered that PLIB did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted TGA file, an attacker could possibly use this issue to cause
applications using PLIB to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | plib | 1.8.5-8ubuntu0.20.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | plib | 1.8.5-7ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | plib | 1.8.5-8ubuntu0.18.04.1~esm1 |
Vulnerabilities 1
-
Unscored —
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vul…
References
-
report
https://ubuntu.com/security/CVE-2021-38714