CVE-2017-14450: Buffer Overflow
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libsdl2-imageto a version that resolves this vulnerability.Fixed in 2.0.4+dfsg1-1+deb10u1Fixed in 2.0.5+dfsg1-2Fixed in 2.6.3+dfsg-1Fixed in 2.6.3+dfsg-2 - Upgrade
Upgrade
debian/sdl-image1.2to a version that resolves this vulnerability.Fixed in 1.2.12-10+deb10u1Fixed in 1.2.12-12Fixed in 1.2.12-13 - Upgrade
Upgrade
alpine/sdl2_imageto a version that resolves this vulnerability.Fixed in 2.0.3-r0 - Upgrade
Upgrade
alpine/sdl2_imageto a version that resolves this vulnerability.Fixed in 2.0.1-r2 - Upgrade
Upgrade
alpine/sdl2_imageto a version that resolves this vulnerability.Fixed in 2.0.2-r1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14450?
The severity of CVE-2017-14450 is high (7.1).
How does CVE-2017-14450 affect SDL2_image-2.0.2?
CVE-2017-14450 affects SDL2_image-2.0.2 through a buffer overflow vulnerability in the GIF image parsing functionality.
What is the impact of CVE-2017-14450?
CVE-2017-14450 can lead to a buffer overflow on a global section when a specially crafted GIF image is displayed, allowing an attacker to trigger the vulnerability.
What is the remedy for CVE-2017-14450 in libsdl2-image?
The remedy for CVE-2017-14450 in libsdl2-image is to update to version 2.0.4+dfsg1-1+deb10u1 or later.
What is the remedy for CVE-2017-14450 in sdl-image1.2?
The remedy for CVE-2017-14450 in sdl-image1.2 is to update to version 1.2.12-10+deb10u1 or later.