An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2803 advisory.

  - An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A     specially crafted file can cause an integer overflow resulting in too little memory being allocated which     can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted     image file to trigger this vulnerability. (CVE-2017-2888)

  - SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in     SDL_FillRect in video/SDL_surface.c. (CVE-2019-7637)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4143-1 advisory.

    It was discovered that SDL 2.0 mishandled crafted image files resulting in an integer overflow. If a user     were tricked into opening a malicious file, SDL 2.0 could be caused to crash or potentially run arbitrary     code. (CVE-2017-2888)

    It was discovered that SDL 2.0 mishandled crafted image files. If a user were

    tricked into opening a malicious file, SDL 2.0 could be caused to crash or

    potentially run arbitrary code. (CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Fix CVE-2017-2888

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Added audio stream conversion functions :

  - `SDL_NewAudioStream()`

  - `SDL_AudioStreamPut()`

  - `SDL_AudioStreamGet()`

  - `SDL_AudioStreamAvailable()`

  - `SDL_AudioStreamFlush()`

  - `SDL_AudioStreamClear()`

  - `SDL_FreeAudioStream()`

  - Added functions to query and set the SDL memory     allocation functions :

  - `SDL_GetMemoryFunctions()`

  - `SDL_SetMemoryFunctions()`

  - `SDL_GetNumAllocations()`

  - Added locking functions for multi-threaded access to the     joystick and game controller APIs :

  - `SDL_LockJoysticks()`

  - `SDL_UnlockJoysticks()`

  - The following functions are now thread-safe :

  - `SDL_SetEventFilter()`

  - `SDL_GetEventFilter()`

  - `SDL_AddEventWatch()`

  - `SDL_DelEventWatch()`

----

Fix CVE-2017-2888

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for SDL2 fixes the following issues :

  - CVE-2017-2888: An exploitable integer overflow     vulnerability exists when creating a new RGB Surface in     SDL. A specially crafted file can cause an integer     overflow resulting in too little memory being allocated     which can lead to a buffer overflow and potential code     execution. An attacker can provide a specially crafted     image file to trigger this vulnerability. (bsc#1062784)

ID	Name	Product	Family	Severity
154751	Debian DLA-2803-1 : libsdl2 - LTS security update	Nessus	Debian Local Security Checks	high
129489	Ubuntu 16.04 LTS / 18.04 LTS : SDL 2.0 vulnerabilities (USN-4143-1)	Nessus	Ubuntu Local Security Checks	high
105979	Fedora 27 : SDL2 (2017-ce403f01ce)	Nessus	Fedora Local Security Checks	high
104309	Fedora 26 : SDL2 (2017-5b132e3803)	Nessus	Fedora Local Security Checks	high
104242	openSUSE Security Update : SDL2 (openSUSE-2017-1217)	Nessus	SuSE Local Security Checks	high
104195	Fedora 25 : SDL2 (2017-5934ecf841)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-2888

high

Tenable Plugins

high

high

high

high

high

high