An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libsdl2-image-2.0-0", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" }, { "binary_name": "libsdl2-image-2.0-0-dbgsym", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" }, { "binary_name": "libsdl2-image-dbg", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" }, { "binary_name": "libsdl2-image-dev", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" }, { "binary_name": "libsdl2-image-dev-dbgsym", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" } ], "ubuntu_priority": "medium" }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libsdl-image1.2", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" }, { "binary_name": "libsdl-image1.2-dbg", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" }, { "binary_name": "libsdl-image1.2-dbgsym", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" }, { "binary_name": "libsdl-image1.2-dev", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" }, { "binary_name": "libsdl-image1.2-dev-dbgsym", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libsdl-image1.2", "binary_version": "1.2.12-5+deb9u1ubuntu0.16.04.1" }, { "binary_name": "libsdl-image1.2-dbg", "binary_version": "1.2.12-5+deb9u1ubuntu0.16.04.1" }, { "binary_name": "libsdl-image1.2-dbgsym", "binary_version": "1.2.12-5+deb9u1ubuntu0.16.04.1" }, { "binary_name": "libsdl-image1.2-dev", "binary_version": "1.2.12-5+deb9u1ubuntu0.16.04.1" }, { "binary_name": "libsdl-image1.2-dev-dbgsym", "binary_version": "1.2.12-5+deb9u1ubuntu0.16.04.1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libsdl-image1.2", "binary_version": "1.2.12-8ubuntu0.1" }, { "binary_name": "libsdl-image1.2-dbgsym", "binary_version": "1.2.12-8ubuntu0.1" }, { "binary_name": "libsdl-image1.2-dev", "binary_version": "1.2.12-8ubuntu0.1" } ], "ubuntu_priority": "medium" }