Bug 1089107 (CVE-2018-3838) - VUL-1: CVE-2018-3838: SDL_image,SDL2_image: An exploitable information vulnerability exists in the XCF image renderingfunctionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially craftedXCF image can cause an out-of-bounds read on the hea
Summary: VUL-1: CVE-2018-3838: SDL_image,SDL2_image: An exploitable information vulner...
Status: RESOLVED FIXED
Alias: CVE-2018-3838
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P4 - Low : Normal
Target Milestone: ---
Assignee: Alexander Herzig
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/203582/
Whiteboard: CVSSv3:SUSE:CVE-2018-3838:4.4:(AV:L/A...
Keywords:
Depends on:
Blocks:
 
Reported: 2018-04-11 13:28 UTC by Marcus Meissner
Modified: 2020-11-10 21:22 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2018-04-11 13:28:54 UTC 
CVE-2018-3838

An exploitable information vulnerability exists in the XCF image rendering
functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted
XCF image can cause an out-of-bounds read on the heap, resulting in information
disclosure. An attacker can display a specially crafted image to trigger this
vulnerability.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3838
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0520
Comment 1 Jan Engelhardt 2018-06-04 09:09:13 UTC 
Probably fixed, but no way of knowing since the report is lacking a reproducer, and the SCM commits don't mention any CVE/etc. IDs.
Comment 2 Marcus Meissner 2018-06-25 12:13:50 UTC 
2.0.3 has the fix.

closest commit is probably:
https://hg.libsdl.org/SDL_image/rev/c5f9cbb5d2bb
Comment 3 Marcus Meissner 2018-06-25 12:25:35 UTC 
SDL2_image in 42.3 and 15.0 and Factory is fixed by the 2.0.3 update.

SDL_image in the 11-SP4 SDK is too old and currently not planned to recveive a fix.