vulnerability

Debian: CVE-2018-3837: libsdl2-image, sdl-image1.2 -- security update

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
2018-04-10
Added
2018-04-21
Modified
2020-02-18

Description

An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.

Solution(s)

debian-upgrade-libsdl2-imagedebian-upgrade-sdl-image1-2
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.