CVE-2019-15058
stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (orta).
Açıklama
stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load, leading to Information Disclosure or Denial of Service.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | libstb | düzeltme belirtilmemiş |
| debian 11 | libstb | düzeltme belirtilmemiş |
| debian 12 | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| debian 13 | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| debian 14 | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| echo | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| Red Hat | clutter, clutter-devel, clutter-doc | düzeltme belirtilmemiş |
7 kaynaktaki 9 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | libstb | düzeltme belirtilmemiş |
| debian 11 | libstb | düzeltme belirtilmemiş |
| debian 12 | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| debian 13 | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| debian 14 | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| echo | libstb | 0.0~git20210910.af1a5bc+ds-1 |
| Red Hat | clutter | düzeltme belirtilmemiş |
| Red Hat | clutter-devel | düzeltme belirtilmemiş |
| Red Hat | clutter-doc | düzeltme belirtilmemiş |
Referanslar
- https://access.redhat.com/security/cve/CVE-2019-15058
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934973
- https://github.com/nothings/stb/issues/790
- https://nvd.nist.gov/vuln/detail/CVE-2019-15058
- https://security-tracker.debian.org/tracker/CVE-2019-15058
- https://www.cve.org/CVERecord?id=CVE-2019-15058
- https://www.cvedetails.com/cve/CVE-2019-15058/
- https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1695025.html