Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-3837

Опубликовано: 10 апр. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 4.3
CVSS3: 5.5

Описание

An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

2.0.3+dfsg1-1
devel

not-affected

2.0.3+dfsg1-1
esm-apps/bionic

not-affected

2.0.3+dfsg1-1
esm-apps/xenial

released

2.0.1+dfsg-2+deb9u1build0.16.04.1
esm-infra-legacy/trusty

released

2.0.0+dfsg-3+deb8u1build0.14.04.1
precise/esm

DNE

trusty

released

2.0.0+dfsg-3+deb8u1build0.14.04.1
trusty/esm

released

2.0.0+dfsg-3+deb8u1build0.14.04.1
upstream

released

2.0.3+dfsg1-1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1.2.12-8
devel

not-affected

1.2.12-8
esm-apps/bionic

not-affected

1.2.12-8
esm-apps/xenial

released

1.2.12-5+deb9u1build0.16.04.1
esm-infra-legacy/trusty

released

1.2.12-5+deb9u1build0.14.04.1
precise/esm

DNE

trusty

released

1.2.12-5+deb9u1build0.14.04.1
trusty/esm

released

1.2.12-5+deb9u1build0.14.04.1
upstream

released

1.2.12-8

Показывать по

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
почти 8 лет назад

An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.

CVSS3: 5.5
debian
почти 8 лет назад

An exploitable information disclosure vulnerability exists in the PCX ...

CVSS3: 5.5
github
больше 3 лет назад

An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.

4.3 Medium

CVSS2

5.5 Medium

CVSS3