Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:3861-1

Опубликовано: 22 нояб. 2018
Источник: suse-cvrf

Описание

Security update for SDL_image

This update for SDL_image fixes the following issues:

Security issue fixed:

  • CVE-2018-3977: Fixed a heap overflow issue (bsc#1114519).

Список пакетов

SUSE Linux Enterprise Software Development Kit 11 SP4
SDL_image-1.2.6-84.46.1
SDL_image-devel-1.2.6-84.46.1

Ссылки

Описание

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 11 SP4:SDL_image-1.2.6-84.46.1
SUSE Linux Enterprise Software Development Kit 11 SP4:SDL_image-devel-1.2.6-84.46.1
Ссылки