{"schemaVersion":3,"id":"MGASA-2018-0276","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated SDL_image packages fix security vulnerability\n\nMultiple vulnerabilities have been discovered in the image loading library\nfor Simple DirectMedia Layer 1.2, which could result in denial of service\nor the execution of arbitrary code if malformed image files are opened\n(CVE-2017-12122, CVE-2017-14440, CVE-2017-14441, CVE-2017-14442,\nCVE-2017-14448, CVE-2017-14450, CVE-2018-3837, CVE-2018-3838,\nCVE-2018-3839).","dates":{"published":"2018-06-06T18:15:31.000Z","modified":"2026-04-16T06:25:00.687Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"SDL_image","name":"SDL_image","label":"SDL_image","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/SDL_image","purlType":"rpm","versions":[{"text":"< 1.2.12-8.2.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.12-8.2.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"SDL_image","name":"SDL_image","label":"SDL_image","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/SDL_image","purlType":"rpm","versions":[{"text":"< 1.2.12-9.2.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.12-9.2.mga6","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2018-0276.html","label":"advisories.mageia.org/MGASA-2018-0276.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22967","label":"bugs.mageia.org/show_bug.cgi?id=22967","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/security/2018/dsa-4184","label":"www.debian.org/security/2018/dsa-4184","hostname":"www.debian.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-12122","CVE-2017-14440","CVE-2017-14441","CVE-2017-14442","CVE-2017-14448","CVE-2017-14450","CVE-2018-3837","CVE-2018-3838","CVE-2018-3839"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-06-06T18:15:31.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:25:00.687Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T04:50:32.517Z","stale":false,"partial":false}}