This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-36489 →

DEBIAN-CVE-2021-36489

Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image ad...

Original description

The description as published by the source.

Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 allegro4.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 allegro4.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 allegro4.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.3.1-8"}]}]

Debian:12 allegro5

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.8.0-1"}]}]

Debian:13 allegro5

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.8.0-1"}]}]

Debian:14 allegro5

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.8.0-1"}]}]

References

advisory security-tracker.debian.org