Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2021-38115 PUBLISHED CVSS 6.5 MEDIUM

read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.23gd0, 2.0.35-r0, 2.0.35-r1
Alpine:v3.17gd2.3.0-r0, 2.2.5-r2, 2.2.5-r1
Alpine:v3.18gd0, 2.3.0-r0, 2.2.5-r2
Alpine:v3.12gd0, 2.2.5-r2, 2.2.5-r1
Alpine:v3.20gd2.0.35-r0, 2.3.0-r0, 2.2.5-r2
Alpine:v3.14gd2.3.0-r0, 0, 2.0.35-r0
Alpine:v3.13gd0, 2.0.35-r0, 2.0.35-r1
Alpine:v3.21gd2.0.35-r0, 2.3.0-r0, 2.2.5-r2
Alpine:v3.16gd2.3.0-r0, 2.2.5-r2, 2.2.5-r1
Alpine:v3.19gd0, 2.3.0-r0, 2.2.5-r2
Alpine:v3.11gd2.0.35-r0, 2.2.5-r3, 2.2.5-r2
Alpine:v3.15gd2.2.5-r2, 2.3.0-r0, 0
Alpine:v3.22gd0, 2.0.35-r0, 2.0.35-r1

Timeline

References

Open in Interactive Console →