Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian LTS: DLA-1865-1 Critical: sdl-image1.2 Buffer Overflow Threat

debian lts
Calendar Grey July 27, 2019
Dist Debian Esm H88
Address risks of remote code execution in sdl-image1.2. Implement patches to resolve heap overflow vulnerabilities.
The following issues have been found in sdl-image1.2, the 1.x version of the image file loading library
Topics%20covered

Topics Covered

security advisory buffer overflow debian remote execution doS image library

Summary

Heap buffer overflow in IMG_xcf.c. This vulnerability might be leveraged by
remote attackers to cause remote code execution or denial of service via a
crafted XCF file.

CVE-2019-5051

Heap based buffer overflow in IMG_LoadPCX_RW, in IMG_pcx.c. This
vulnerability might be leveraged by remote attackers to cause remote code
execution or denial of service via a crafted PCX file.

CVE-2019-5052

Integer overflow and subsequent buffer overflow in IMG_pcx.c. This
vulnerability might be leveraged by remote attackers to cause remote code
execution or denial of service via a crafted PCX file.

CVE-2019-7635

Heap buffer overflow affecting Blit1to4, in IMG_bmp.c. This vulnerability
might be leveraged by remote attackers to cause denial of service or any
other unspecified impact via a crafted BMP file.

CVE-2019-12216,
CVE-2019-12217,
CVE-2019-12218,
CVE-2019-12219,
CVE-2019-12220,
CVE-2019-12221,
CVE-2019-12222

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

Package: sdl-image1.2
Version: 1.2.12-5+deb9u2
CVE ID: CVE-2018-3977 CVE-2019-5051 CVE-2019-5052 CVE-2019-7635

Topics%20covered

Topics Covered

security advisory buffer overflow debian remote execution doS image library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here