Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Mageia 8: 2022-0332 Moderate: SDL12 Heap Overflow Attack

mageia
Calendar Grey September 16, 2022
Dist Mageia Esm H88
Mageia 8: SDL12 security patch resolves heap overflow vulnerabilities and mitigates risks of exploitation through specially designed BMP files.
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions

Summary

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution. (CVE-2021-33657)
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c. (CVE-2022-34568)

References

- https://bugs.mageia.org/show_bug.cgi?id=30786

- https://lists.suse.com/pipermail/sle-security-updates/2022-April/010735.html

-

- https://ubuntu.com/security/notices/USN-5398-1

-

- https://www.cve.org/CVERecord?id=CVE-2021-33657

- https://www.cve.org/CVERecord?id=CVE-2022-34568

Topics%20covered

Topics Covered

security advisory denial of service heap overflow Mageia SDL

Resolution

SRPMS

- 8/core/SDL12-1.2.15-26.1.mga8

Publication date: 16 Sep 2022
URL: https://advisories.mageia.org/MGASA-2022-0332.html
Type: security
CVE: CVE-2021-33657, CVE-2022-34568

Topics%20covered

Topics Covered

security advisory denial of service heap overflow Mageia SDL

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.