CVE-2017-2888 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-2888 Interim 1 50 2025-11-05T04:10:48Z current 2021-05-30T13:50:29Z 2025-11-05T04:10:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-2888 An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Package Hub 12 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed SDL SDL-32bit SDL-devel SDL-devel-32bit SDL2 SDL2-2.32.8-1.1 SDL2-devel-2.28.5-150600.1.4 libSDL-1_2-0 libSDL-1_2-0-32bit libSDL-devel libSDL2-2_0-0 libSDL2-2_0-0-2.0.16-2.3 libSDL2-2_0-0-2.0.5-7.1 libSDL2-2_0-0-2.0.8-1.34 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.9.1 libSDL2-2_0-0-2.0.8-3.9.1 libSDL2-2_0-0-2.0.8-9.63 libSDL2-2_0-0-2.0.8-lp150.1.1 libSDL2-2_0-0-2.0.8-lp152.7.4 libSDL2-2_0-0-2.28.5-150600.1.4 libSDL2-2_0-0-2.30.7-160000.2.2 libSDL2-2_0-0-32bit libSDL2-2_0-0-32bit-2.0.16-2.3 libSDL2-devel libSDL2-devel-2.0.16-2.3 libSDL2-devel-2.0.5-7.1 libSDL2-devel-2.0.8-1.34 libSDL2-devel-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.9.1 libSDL2-devel-2.0.8-3.9.1 libSDL2-devel-2.0.8-9.63 libSDL2-devel-32bit-2.0.16-2.3 libSDL2-2_0-0-2.0.8-1.34 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libSDL2-devel-2.0.8-1.34 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libSDL2-2_0-0-2.0.8-3.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libSDL2-devel-2.0.8-3.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libSDL2-2_0-0-2.0.8-9.63 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libSDL2-devel-2.0.8-9.63 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libSDL2-2_0-0-2.0.8-9.63 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libSDL2-devel-2.0.8-9.63 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libSDL2-2_0-0-2.0.8-150200.11.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libSDL2-devel-2.0.8-150200.11.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libSDL2-2_0-0-2.0.8-150200.11.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libSDL2-devel-2.0.8-150200.11.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SDL2-devel-2.28.5-150600.1.4 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libSDL2-2_0-0-2.28.5-150600.1.4 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SDL2-devel-2.28.5-150600.1.4 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libSDL2-2_0-0-2.28.5-150600.1.4 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libSDL2-2_0-0-2.30.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libSDL2-2_0-0-2.0.5-7.1 as a component of SUSE Package Hub 12 libSDL2-devel-2.0.5-7.1 as a component of SUSE Package Hub 12 libSDL2-2_0-0-2.0.8-lp150.1.1 as a component of openSUSE Leap 15.0 libSDL2-2_0-0-2.0.8-lp152.7.4 as a component of openSUSE Leap 15.2 libSDL2-2_0-0-2.0.8-9.63 as a component of openSUSE Leap 15.3 libSDL2-2_0-0-2.0.8-150200.11.6.1 as a component of openSUSE Leap 15.4 SDL2-2.32.8-1.1 as a component of openSUSE Tumbleweed libSDL2-2_0-0-2.0.16-2.3 as a component of openSUSE Tumbleweed libSDL2-2_0-0-32bit-2.0.16-2.3 as a component of openSUSE Tumbleweed libSDL2-devel-2.0.16-2.3 as a component of openSUSE Tumbleweed libSDL2-devel-32bit-2.0.16-2.3 as a component of openSUSE Tumbleweed libSDL2-2_0-0 as a component of SUSE CaaS Platform 4.0 libSDL2-2_0-0-32bit as a component of SUSE CaaS Platform 4.0 libSDL2-devel as a component of SUSE CaaS Platform 4.0 SDL2 as a component of SUSE CaaS Platform 4.0 SDL2 as a component of SUSE Enterprise Storage 6 libSDL-1_2-0 as a component of SUSE Linux Enterprise Desktop 12 SP2 SDL as a component of SUSE Linux Enterprise Desktop 12 SP2 libSDL-1_2-0 as a component of SUSE Linux Enterprise Desktop 12 SP3 SDL as a component of SUSE Linux Enterprise Desktop 12 SP3 libSDL2-2_0-0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libSDL2-2_0-0-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libSDL2-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SDL2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libSDL2-2_0-0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libSDL2-2_0-0-32bit as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libSDL2-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS SDL2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS SDL as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata SDL as a component of SUSE Linux Enterprise Server 11 SP3 LTSS SDL as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata SDL as a component of SUSE Linux Enterprise Server 11 SP4-LTSS SDL-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libSDL-1_2-0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libSDL-1_2-0-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS SDL as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libSDL-1_2-0 as a component of SUSE Linux Enterprise Server 12 SP2 libSDL-1_2-0-32bit as a component of SUSE Linux Enterprise Server 12 SP2 SDL as a component of SUSE Linux Enterprise Server 12 SP2 libSDL-1_2-0 as a component of SUSE Linux Enterprise Server 12 SP3 libSDL-1_2-0-32bit as a component of SUSE Linux Enterprise Server 12 SP3 SDL as a component of SUSE Linux Enterprise Server 12 SP3 libSDL-1_2-0 as a component of SUSE Linux Enterprise Server 12-LTSS libSDL-1_2-0-32bit as a component of SUSE Linux Enterprise Server 12-LTSS SDL as a component of SUSE Linux Enterprise Server 12-LTSS libSDL2-2_0-0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libSDL2-2_0-0-32bit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libSDL2-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS SDL2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS SDL2 as a component of SUSE Linux Enterprise Server 15-ESPOS libSDL2-2_0-0 as a component of SUSE Linux Enterprise Server 15-LTSS libSDL2-2_0-0-32bit as a component of SUSE Linux Enterprise Server 15-LTSS libSDL2-devel as a component of SUSE Linux Enterprise Server 15-LTSS SDL2 as a component of SUSE Linux Enterprise Server 15-LTSS SDL2 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 libSDL2-2_0-0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libSDL2-2_0-0-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 libSDL2-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SDL2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libSDL2-2_0-0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libSDL2-2_0-0-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libSDL2-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 SDL2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 SDL-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 SDL-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 SDL-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 SDL as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libSDL-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 SDL as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libSDL-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 SDL as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 SDL2 as a component of SUSE Manager Proxy 4.0 SDL2 as a component of SUSE Manager Retail Branch Server 4.0 SDL2 as a component of SUSE Manager Server 4.0 An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability. CVE-2017-2888 SUSE Linux Enterprise Module for Desktop Applications 15:libSDL2-2_0-0-2.0.8-1.34 SUSE Linux Enterprise Module for Desktop Applications 15:libSDL2-devel-2.0.8-1.34 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libSDL2-2_0-0-2.0.8-3.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libSDL2-devel-2.0.8-3.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libSDL2-2_0-0-2.0.8-9.63 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libSDL2-devel-2.0.8-9.63 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libSDL2-2_0-0-2.0.8-9.63 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libSDL2-devel-2.0.8-9.63 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libSDL2-2_0-0-2.0.8-150200.11.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libSDL2-devel-2.0.8-150200.11.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libSDL2-2_0-0-2.0.8-150200.11.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libSDL2-devel-2.0.8-150200.11.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:SDL2-devel-2.28.5-150600.1.4 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libSDL2-2_0-0-2.28.5-150600.1.4 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:SDL2-devel-2.28.5-150600.1.4 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libSDL2-2_0-0-2.28.5-150600.1.4 SUSE Linux Enterprise Server 16.0:libSDL2-2_0-0-2.30.7-160000.2.2 SUSE Package Hub 12:libSDL2-2_0-0-2.0.5-7.1 SUSE Package Hub 12:libSDL2-devel-2.0.5-7.1 openSUSE Leap 15.0:libSDL2-2_0-0-2.0.8-lp150.1.1 openSUSE Leap 15.2:libSDL2-2_0-0-2.0.8-lp152.7.4 openSUSE Leap 15.3:libSDL2-2_0-0-2.0.8-9.63 openSUSE Leap 15.4:libSDL2-2_0-0-2.0.8-150200.11.6.1 openSUSE Tumbleweed:SDL2-2.32.8-1.1 openSUSE Tumbleweed:libSDL2-2_0-0-2.0.16-2.3 openSUSE Tumbleweed:libSDL2-2_0-0-32bit-2.0.16-2.3 openSUSE Tumbleweed:libSDL2-devel-2.0.16-2.3 openSUSE Tumbleweed:libSDL2-devel-32bit-2.0.16-2.3 SUSE CaaS Platform 4.0:SDL2 SUSE CaaS Platform 4.0:libSDL2-2_0-0 SUSE CaaS Platform 4.0:libSDL2-2_0-0-32bit SUSE CaaS Platform 4.0:libSDL2-devel SUSE Enterprise Storage 6:SDL2 SUSE Linux Enterprise Desktop 12 SP2:SDL SUSE Linux Enterprise Desktop 12 SP2:libSDL-1_2-0 SUSE Linux Enterprise Desktop 12 SP3:SDL SUSE Linux Enterprise Desktop 12 SP3:libSDL-1_2-0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:SDL2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libSDL2-2_0-0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libSDL2-2_0-0-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libSDL2-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:SDL2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libSDL2-2_0-0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libSDL2-2_0-0-32bit SUSE Linux Enterprise High Performance Computing 15-LTSS:libSDL2-devel SUSE Linux Enterprise Server 11 SP1 for Teradata:SDL SUSE Linux Enterprise Server 11 SP3 LTSS:SDL SUSE Linux Enterprise Server 11 SP3 for Teradata:SDL SUSE Linux Enterprise Server 11 SP4-LTSS:SDL SUSE Linux Enterprise Server 11 SP4-LTSS:SDL-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:SDL SUSE Linux Enterprise Server 12 SP1-LTSS:libSDL-1_2-0 SUSE Linux Enterprise Server 12 SP1-LTSS:libSDL-1_2-0-32bit SUSE Linux Enterprise Server 12 SP2:SDL SUSE Linux Enterprise Server 12 SP2:libSDL-1_2-0 SUSE Linux Enterprise Server 12 SP2:libSDL-1_2-0-32bit SUSE Linux Enterprise Server 12 SP3:SDL SUSE Linux Enterprise Server 12 SP3:libSDL-1_2-0 SUSE Linux Enterprise Server 12 SP3:libSDL-1_2-0-32bit SUSE Linux Enterprise Server 12-LTSS:SDL SUSE Linux Enterprise Server 12-LTSS:libSDL-1_2-0 SUSE Linux Enterprise Server 12-LTSS:libSDL-1_2-0-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:SDL2 SUSE Linux Enterprise Server 15 SP1-LTSS:libSDL2-2_0-0 SUSE Linux Enterprise Server 15 SP1-LTSS:libSDL2-2_0-0-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:libSDL2-devel SUSE Linux Enterprise Server 15-ESPOS:SDL2 SUSE Linux Enterprise Server 15-LTSS:SDL2 SUSE Linux Enterprise Server 15-LTSS:libSDL2-2_0-0 SUSE Linux Enterprise Server 15-LTSS:libSDL2-2_0-0-32bit SUSE Linux Enterprise Server 15-LTSS:libSDL2-devel SUSE Linux Enterprise Server Business Critical Linux 15 SP1:SDL2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:SDL2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libSDL2-2_0-0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libSDL2-2_0-0-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP1:libSDL2-devel SUSE Linux Enterprise Server for SAP Applications 15:SDL2 SUSE Linux Enterprise Server for SAP Applications 15:libSDL2-2_0-0 SUSE Linux Enterprise Server for SAP Applications 15:libSDL2-2_0-0-32bit SUSE Linux Enterprise Server for SAP Applications 15:libSDL2-devel SUSE Linux Enterprise Software Development Kit 11 SP4:SDL SUSE Linux Enterprise Software Development Kit 11 SP4:SDL-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:SDL-devel SUSE Linux Enterprise Software Development Kit 11 SP4:SDL-devel-32bit SUSE Linux Enterprise Software Development Kit 12 SP2:SDL SUSE Linux Enterprise Software Development Kit 12 SP2:libSDL-devel SUSE Linux Enterprise Software Development Kit 12 SP3:SDL SUSE Linux Enterprise Software Development Kit 12 SP3:libSDL-devel SUSE Manager Proxy 4.0:SDL2 SUSE Manager Retail Branch Server 4.0:SDL2 SUSE Manager Server 4.0:SDL2 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H