Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file.

CVE-2021-42006 · published 5 years ago
Summary

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file.

What to do
  • Update debian libgclib to version 0.12.7+ds-2.
Affected software
Ecosystem VendorProductAffected versions
– gclib_project gclib 0.12.7
cpe:2.3:a:gclib_project:gclib:0.12.7:*:*:*:*:*:*:*
Ubuntu:16.04:LTS canonical libgff All versions
Ubuntu:16.04:LTS canonical tophat All versions
Ubuntu:18.04:LTS canonical cufflinks All versions
Ubuntu:20.04:LTS canonical libgclib All versions
Ubuntu:20.04:LTS canonical stringtie All versions
Debian:12 debian libgclib < 0.12.7+ds-2
Fix: upgrade to 0.12.7+ds-2
Original advisory text
An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file.
An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published4 Oct 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-42006 · NVD
UBUNTU-CVE-2021-42006 · OSV
CVE-2021-42006 · OSV
DEBIAN-CVE-2021-42006 · OSV
Track software like this
Free during beta