Summary
It was discovered that SDL incorrectly handled certain images. If a user
were tricked into opening a crafted image file, a remote attacker could
use this issue to cause SDL to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libsdl1.2 | 1.2.15+dfsg1-3ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libsdl1.2 | 1.2.15+dfsg2-0.1ubuntu0.1 |
Vulnerabilities 12
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in vi…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM i…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_deco…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM i…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/S…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM …
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in vi…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in …
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in vid…
References
-
report
https://ubuntu.com/security/CVE-2019-7572
-
report
https://ubuntu.com/security/CVE-2019-7573
-
report
https://ubuntu.com/security/CVE-2019-7574
-
report
https://ubuntu.com/security/CVE-2019-7575
-
report
https://ubuntu.com/security/CVE-2019-7576
-
report
https://ubuntu.com/security/CVE-2019-7577
-
report
https://ubuntu.com/security/CVE-2019-7578
-
report
https://ubuntu.com/security/CVE-2019-7635
-
report
https://ubuntu.com/security/CVE-2019-7636
-
report
https://ubuntu.com/security/CVE-2019-7637
-
report
https://ubuntu.com/security/CVE-2019-7638
-
report
https://ubuntu.com/security/CVE-2019-13616