ALT-PU-2017-2305-1
Closed vulnerabilities
Published: 2017-10-07
BDU:2022-05864
Уязвимость библиотеки Simple DirectMedia Layer, связанная с целочисленным переполнением, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Severity: HIGH (8.8)
Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: CRITICAL (9.3)
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
Published: 2017-10-11
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2017-2888
An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
Severity: MEDIUM (6.8)
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Severity: HIGH (8.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
- http://www.securityfocus.com/bid/101215
- https://lists.debian.org/debian-lts-announce/2021/10/msg00031.html
- https://usn.ubuntu.com/4143-1/
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395
- http://www.securityfocus.com/bid/101215
- https://lists.debian.org/debian-lts-announce/2021/10/msg00031.html
- https://usn.ubuntu.com/4143-1/
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395