Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Mageia 8: MGASA-2022-0326 Moderate: SDL2 Heap Overflow Threat

mageia
Calendar Grey September 16, 2022
Dist Mageia Esm H88
Enhance the sdl2 libraries to resolve a heap underflow vulnerability that may result in application failures or unauthorized code execution threats.
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions

Summary

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, for denial of service, or for Code execution. (CVE-2021-33657)

References

- https://bugs.mageia.org/show_bug.cgi?id=30293

- https://lists.suse.com/pipermail/sle-security-updates/2022-April/010735.html

-

- https://ubuntu.com/security/notices/USN-5398-1

- https://www.cve.org/CVERecord?id=CVE-2021-33657

Topics%20covered

Topics Covered

security advisory denial of service heap overflow application crash Mageia

Resolution

SRPMS

- 8/core/sdl2-2.0.14-1.1.mga8

Publication date: 16 Sep 2022
URL: https://advisories.mageia.org/MGASA-2022-0326.html
Type: security
CVE: CVE-2021-33657

Topics%20covered

Topics Covered

security advisory denial of service heap overflow application crash Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.