Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 8: DLA-1861-1 Moderate: libsdl2-image Buffer Overflow

debian lts
Calendar Grey July 22, 2019
Dist Debian Esm H88
Addressing multiple security issues in libsdl2-image with updates recommended. Protect against exploitation in Debian 8.
The following issues have been found in libsdl2-image, the image file loading library
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow remote code execution debian image loading libSDL2

Summary

CVE-2018-3977

Heap buffer overflow in IMG_xcf.c. This vulnerability might be leveraged by
remote attackers to cause remote code execution or denial of service via a
crafted XCF file.

CVE-2019-5052

Integer overflow and subsequent buffer overflow in IMG_pcx.c. This
vulnerability might be leveraged by remote attackers to cause remote code
execution or denial of service via a crafted PCX file.

CVE-2019-7635

Heap buffer overflow affecting Blit1to4, in IMG_bmp.c. This vulnerability
might be leveraged by remote attackers to cause denial of service or any
other unspecified impact via a crafted BMP file.

CVE-2019-12216,
CVE-2019-12217,
CVE-2019-12218,
CVE-2019-12219,
CVE-2019-12220,
CVE-2019-12221,
CVE-2019-12222

Multiple out-of-bound read and write accesses affecting IMG_LoadPCX_RW, in
IMG_pcx.c. These vulnerabilities might be leveraged by remote attackers to
cause denial of service or any other unspecified impact via a crafted PCX
file.

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Package: libsdl2-image
Version: 2.0.0+dfsg-3+deb8u2
CVE ID: CVE-2018-3977 CVE-2019-5052 CVE-2019-7635 CVE-2019-12216
Debian Bug: 932754, 932755

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow remote code execution debian image loading libSDL2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here