openSUSE-SU-2017:2895-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2017:2895-1

Related

Published

2017-10-27T19:17:03Z

Modified

2017-10-27T19:17:03Z

Summary

Security update for SDL2

Details

This update for SDL2 fixes the following issues:

CVE-2017-2888: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability. (bsc#1062784)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.5-7.1

{
    "binaries": [
        {
            "libSDL2-devel": "2.0.5-7.1",
            "libSDL2-2_0-0": "2.0.5-7.1"
        }
    ]
}