Summary
It was discovered that SDL_image incorrectly handled certain image files. An
attacker could possibly use this issue to cause a denial of service or other
unspecified impact.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | sdl-image1.2 | 1.2.12-5+deb9u1ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | sdl-image1.2 | 1.2.12-8ubuntu0.1 |
Vulnerabilities 12
-
High 8.8
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A spec…
-
High 8.8
An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A …
-
High 8.8
An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted f…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_imag…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_imag…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_imag…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_imag…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_imag…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_imag…
-
Unscored —
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the fun…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in vi…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in vi…
References
-
report
https://ubuntu.com/security/CVE-2018-3977
-
report
https://ubuntu.com/security/CVE-2019-5051
-
report
https://ubuntu.com/security/CVE-2019-5052
-
report
https://ubuntu.com/security/CVE-2019-7635
-
report
https://ubuntu.com/security/CVE-2019-12216
-
report
https://ubuntu.com/security/CVE-2019-12217
-
report
https://ubuntu.com/security/CVE-2019-12218
-
report
https://ubuntu.com/security/CVE-2019-12219
-
report
https://ubuntu.com/security/CVE-2019-12220
-
report
https://ubuntu.com/security/CVE-2019-12221
-
report
https://ubuntu.com/security/CVE-2019-12222
-
report
https://ubuntu.com/security/CVE-2019-13616