{"id":"CVE-2017-2888","aliases":["DEBIAN-CVE-2017-2888","DLA-1714-2","DLA-2803-1","EUVD-2017-12029","GHSA-3x42-vgc3-7f6c","MGASA-2017-0398","UBUNTU-CVE-2017-2888","USN-4143-1","openSUSE-SU-2017:2893-1","openSUSE-SU-2017:2895-1","openSUSE-SU-2024:10607-1","openSUSE-SU-2025:15206-1"],"status":"published","title":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5...","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.03072,"percentile":0.87737,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2017-10-11T00:00:00Z","modified":"2026-10-24T10:30:42Z","fixes":[{"ecosystem":"Debian:12","package":"libsdl2","fixed_in":["2.0.6+dfsg1-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsdl2","fixed_in":["2.0.6+dfsg1-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libsdl2","fixed_in":["2.0.6+dfsg1-4"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libsdl2","fixed_in":["2.0.2+dfsg1-6+deb8u2"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"sdl2","fixed_in":["2.0.3-4.1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"sdl2","fixed_in":["2.0.5-2.1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"mingw-SDL2","fixed_in":["2.0.5-1.mga6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libsdl2","fixed_in":["2.0.4+dfsg1-2ubuntu2.16.04.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"SDL2","fixed_in":["2.0.5-7.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6+dfsg1-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6+dfsg1-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6+dfsg1-4"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+dfsg1-6+deb8u2"}]}],"versions":["2.0.2+dfsg1-6","2.0.2+dfsg1-6+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5+dfsg1-2+deb9u2"}]}],"versions":["2.0.5+dfsg1-2","2.0.5+dfsg1-2+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"sdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-4.1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"sdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-2.1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"mingw-SDL2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4+dfsg1-2ubuntu2.16.04.2"}]}],"versions":["2.0.2+dfsg1-6ubuntu2","2.0.4+dfsg1-2","2.0.4+dfsg1-2ubuntu1","2.0.4+dfsg1-2ubuntu2","2.0.4+dfsg1-2ubuntu2.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4+dfsg1-2ubuntu2.16.04.2"}]}],"versions":["2.0.2+dfsg1-6ubuntu2","2.0.4+dfsg1-2","2.0.4+dfsg1-2ubuntu1","2.0.4+dfsg1-2ubuntu2","2.0.4+dfsg1-2ubuntu2.16.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libsdl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8+dfsg1-1ubuntu1.18.04.4"}]}],"versions":["2.0.6+dfsg1-3ubuntu1","2.0.6+dfsg1-4ubuntu1","2.0.7+dfsg1-3ubuntu1","2.0.8+dfsg1-1ubuntu1","2.0.8+dfsg1-1ubuntu1.18.04.1","2.0.8+dfsg1-1ubuntu1.18.04.3"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"SDL2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"SDL2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"SDL2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.16-2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"SDL2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.8-1.1"}]}],"bundled":17}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"cisco systems, inc.","product":"simple direct media"},{"vendor":"debian","product":"debian_linux"},{"vendor":"libsdl","product":"simple_directmedia_layer"},{"vendor":"talos","product":"simple direct media"}],"references":[{"url":"http://www.securityfocus.com/bid/101215","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","web"]},{"url":"https://usn.ubuntu.com/4143-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00031.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2888"},{"url":"https://usn.ubuntu.com/4143-1"},{"url":"https://github.com/advisories/GHSA-3x42-vgc3-7f6c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-2888","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0398.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21882","tags":["report"]},{"url":"http://hg.libsdl.org/SDL/rev/7e0f1498ddb5","tags":["web"]},{"url":"http://hg.libsdl.org/SDL/rev/81a4950907a0","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-2888","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4143-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7638","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1062784","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4743","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-2888","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2017-10-11T18:00:00Z","modified":"2024-09-16T20:17:03.901Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:15.887816Z"}],"euvd":[{"id":"EUVD-2017-12029","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2017-10-11T18:00:00Z","modified":"2024-09-16T20:17:03Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:15.468069Z"}],"ghsa":[{"id":"GHSA-3x42-vgc3-7f6c","title":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5...","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2022-05-13T01:01:16Z","modified":"2025-04-20T03:47:41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:01:53.867735Z"}],"nvd":[{"id":"CVE-2017-2888","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2017-10-11T18:29:05.083Z","modified":"2026-06-17T01:17:04.25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:01.734197Z"}],"osv":[{"id":"CVE-2017-2888","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2017-10-11T18:29:05.083Z","modified":"2026-10-24T10:30:42.026010124Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-2888","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2017-10-11T18:29:05.083Z","modified":"2026-09-01T20:03:48.051361908Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-2888","description":"An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.","status":"published","published":"2017-10-11T00:00:00Z","modified":"2026-04-22T11:24:10.961294Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1714-2","title":"libsdl2 - regression update","status":"published","published":"2019-10-16T00:00:00Z","modified":"2026-03-09T01:18:25.567211Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2803-1","title":"libsdl2 - security update","status":"published","published":"2021-10-31T00:00:00Z","modified":"2026-03-09T01:20:11.626118Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2017-0398","title":"Updated sdl2 packages fix security vulnerability","description":"Yves Younan of Cisco Talos discovered an exploitable integer overflow\nvulnerability when creating a new RGB Surface in SDL 2.0.x before\nversion 2.0.7. A specially crafted file can cause an integer overflow\nresulting in too little memory being allocated which can lead to a\nbuffer overflow and potential code execution. An attacker can provide a\nspecially crafted image file to trigger this vulnerability\n(CVE-2017-2888).\n","status":"published","published":"2017-11-02T21:47:07Z","modified":"2026-04-16T06:22:35.613660015Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2017:2893-1","title":"Security update for SDL2","description":"This update for SDL2 fixes the following issues:\n\n- CVE-2017-2888: An exploitable integer overflow vulnerability exists\n  when creating a new RGB Surface in SDL. A specially crafted file can cause\n  an integer overflow resulting in too little memory being allocated which\n  can lead to a buffer overflow and potential code execution. An attacker\n  can provide a specially crafted image file to trigger this vulnerability. (bsc#1062784)\n","status":"published","published":"2017-10-27T19:17:03Z","modified":"2025-05-07T18:09:42.355569Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2017:2895-1","title":"Security update for SDL2","description":"This update for SDL2 fixes the following issues:\n\n- CVE-2017-2888: An exploitable integer overflow vulnerability exists\n  when creating a new RGB Surface in SDL. A specially crafted file can cause\n  an integer overflow resulting in too little memory being allocated which\n  can lead to a buffer overflow and potential code execution. An attacker\n  can provide a specially crafted image file to trigger this vulnerability. (bsc#1062784)\n","status":"published","published":"2017-10-27T19:17:03Z","modified":"2026-02-04T03:23:31.013291Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10607-1","title":"libSDL2-2_0-0-2.0.16-2.3 on GA media","description":"These are all security issues fixed in the libSDL2-2_0-0-2.0.16-2.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:42.777648Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2025:15206-1","title":"SDL2-2.32.8-1.1 on GA media","description":"These are all security issues fixed in the SDL2-2.32.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:29.880873Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"USN-4143-1","title":"SDL 2.0 vulnerabilities","description":"It was discovered that SDL 2.0 mishandled crafted image files resulting in an\ninteger overflow. If a user were tricked into opening a malicious file, SDL\n2.0 could be caused to crash or potentially run arbitrary code.\n(CVE-2017-2888)\n\nIt was discovered that SDL 2.0 mishandled crafted image files. If a user were \ntricked into opening a malicious file, SDL 2.0 could be caused to crash or \npotentially run arbitrary code.\n(CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638)\n","status":"published","published":"2019-09-30T15:05:54Z","modified":"2026-04-27T15:33:01.962789013Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}