Описание
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| cosmic | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| devel | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| disco | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| eoan | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| esm-apps-legacy/xenial | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| esm-apps/bionic | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| esm-apps/focal | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| esm-apps/jammy | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
| esm-apps/xenial | not-affected | 2.0.4+dfsg1-2ubuntu2.16.04.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.2.12-8ubuntu0.1 |
| cosmic | ignored | end of life |
| devel | not-affected | 1.2.12-10 |
| disco | not-affected | 1.2.12-10 |
| eoan | not-affected | 1.2.12-10 |
| esm-apps-legacy/xenial | released | 1.2.12-5+deb9u1ubuntu0.16.04.1 |
| esm-apps/bionic | released | 1.2.12-8ubuntu0.1 |
| esm-apps/focal | not-affected | 1.2.12-10 |
| esm-apps/jammy | not-affected | 1.2.12-10 |
| esm-apps/xenial | released | 1.2.12-5+deb9u1ubuntu0.16.04.1 |
Показывать по
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
An exploitable code execution vulnerability exists in the XCF image re ...
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
ALT-PU-2018-3680: package `SDL2_image` update to version 2.0.4-alt1
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3