CVE-2017-14448: High severity libSDL Sdl Image vulnerability
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libsdl2-imageto a version that resolves this vulnerability.Fixed in 2.0.4+dfsg1-1+deb10u1Fixed in 2.0.5+dfsg1-2Fixed in 2.6.3+dfsg-1Fixed in 2.6.3+dfsg-2 - Upgrade
Upgrade
debian/sdl-image1.2to a version that resolves this vulnerability.Fixed in 1.2.12-10+deb10u1Fixed in 1.2.12-12Fixed in 1.2.12-13 - Upgrade
Upgrade
alpine/sdl2_imageto a version that resolves this vulnerability.Fixed in 2.0.3-r0 - Upgrade
Upgrade
alpine/sdl2_imageto a version that resolves this vulnerability.Fixed in 2.0.1-r2 - Upgrade
Upgrade
alpine/sdl2_imageto a version that resolves this vulnerability.Fixed in 2.0.2-r1
Event History
Frequently Asked Questions
What is the vulnerability ID of this exploit?
The vulnerability ID of this exploit is CVE-2017-14448.
What is the severity of CVE-2017-14448?
The severity of CVE-2017-14448 is high with a CVSS score of 8.8.
What is the affected software?
The affected software is SDL2_image-2.0.2, libsdl2-image, sdl-image1.2.
How can an attacker exploit CVE-2017-14448?
An attacker can exploit CVE-2017-14448 by displaying a specially crafted XCF image to trigger a heap overflow resulting in code execution.
Are there any remediation steps available for CVE-2017-14448?
Yes, there are remediation steps available to fix CVE-2017-14448. Please refer to the provided references for more information.