Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-33657

Опубликовано: 01 апр. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.8

Описание

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.

РелизСтатусПримечание
bionic

released

1.2.15+dfsg2-0.1ubuntu0.2
devel

DNE

esm-apps/focal

needed

esm-apps/jammy

needed

esm-infra-legacy/trusty

released

1.2.15-8ubuntu1.1+esm2
esm-infra/bionic

released

1.2.15+dfsg2-0.1ubuntu0.2
esm-infra/xenial

released

1.2.15+dfsg1-3ubuntu0.1+esm1
focal

ignored

end of standard support, was needed
impish

ignored

end of life
jammy

needed

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

2.0.20+dfsg-2
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/xenial

needed

esm-infra-legacy/trusty

needed

focal

ignored

end of standard support, was needed
impish

released

2.0.14+dfsg2-3ubuntu0.1
jammy

not-affected

2.0.20+dfsg-2
kinetic

not-affected

2.0.20+dfsg-2

Показывать по

EPSS

Процентиль: 24%
0.00082
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
почти 4 года назад

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.

CVSS3: 8.8
debian
почти 4 года назад

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple ...

suse-cvrf
почти 4 года назад

Security update for SDL2

suse-cvrf
почти 4 года назад

Security update for SDL2

CVSS3: 8.8
github
почти 4 года назад

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.

EPSS

Процентиль: 24%
0.00082
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3