CVE-2018-3837
Summary
| CVE | CVE-2018-3837 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2018-04-10 21:29:00 UTC |
|---|
| Updated | 2022-10-25 16:54:00 UTC |
|---|
| Description | An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Debian -- Security Information -- DSA-4177-1 libsdl2-image |
DEBIAN |
www.debian.org |
Third Party Advisory |
| CVE-2018-3837 SDL2 vulnerability in StarWind VSAN for vSphere (VSA) |
MISC |
www.starwindsoftware.com |
|
| TALOS-2018-0519 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence |
MISC |
www.talosintelligence.com |
Exploit, Technical Description, Third Party Advisory |
| SDL2_Image: Multiple vulnerabilities (GLSA 201903-17) — Gentoo security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| Debian -- Security Information -- DSA-4184-1 sdl-image1.2 |
DEBIAN |
www.debian.org |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710189 Gentoo Linux SDL2_Image Multiple vulnerabilities (GLSA 201903-17)
