Описание
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.0.3+dfsg1-1 |
| devel | not-affected | 2.0.3+dfsg1-1 |
| esm-apps/bionic | not-affected | 2.0.3+dfsg1-1 |
| esm-apps/xenial | released | 2.0.1+dfsg-2+deb9u1build0.16.04.1 |
| esm-infra-legacy/trusty | released | 2.0.0+dfsg-3+deb8u1build0.14.04.1 |
| precise/esm | DNE | |
| trusty | released | 2.0.0+dfsg-3+deb8u1build0.14.04.1 |
| trusty/esm | released | 2.0.0+dfsg-3+deb8u1build0.14.04.1 |
| upstream | released | 2.0.3+dfsg1-1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 1.2.12-8 |
| devel | not-affected | 1.2.12-8 |
| esm-apps/bionic | not-affected | 1.2.12-8 |
| esm-apps/xenial | released | 1.2.12-5+deb9u1build0.16.04.1 |
| esm-infra-legacy/trusty | released | 1.2.12-5+deb9u1build0.14.04.1 |
| precise/esm | DNE | |
| trusty | released | 1.2.12-5+deb9u1build0.14.04.1 |
| trusty/esm | released | 1.2.12-5+deb9u1build0.14.04.1 |
| upstream | released | 1.2.12-8 |
Показывать по
EPSS
5.8 Medium
CVSS2
7.1 High
CVSS3
Связанные уязвимости
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.
A buffer overflow vulnerability exists in the GIF image parsing functi ...
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.
Уязвимость библиотеки загрузки изображений sdl-image, связанная с ошибками работы с памятью, позволяющая нарушителю вызвать отказ в обслуживании или нарушить целостность данных
EPSS
5.8 Medium
CVSS2
7.1 High
CVSS3