Summary
USN-4156-1 fixed several vulnerabilities in SDL. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that SDL incorrectly handled certain images. If a user
were tricked into opening a crafted image file, a remote attacker could
use this issue to cause SDL to crash, resulting in a denial of service, or
possibly execute arbitary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libsdl1.2 | 1.2.15-8ubuntu1.1+esm1 |
Vulnerabilities 11
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in vi…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM i…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_deco…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM i…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/S…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM …
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in vi…
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in …
-
Unscored —
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in…
References
-
report
https://ubuntu.com/security/CVE-2019-7572
-
report
https://ubuntu.com/security/CVE-2019-7573
-
report
https://ubuntu.com/security/CVE-2019-7574
-
report
https://ubuntu.com/security/CVE-2019-7575
-
report
https://ubuntu.com/security/CVE-2019-7576
-
report
https://ubuntu.com/security/CVE-2019-7577
-
report
https://ubuntu.com/security/CVE-2019-7578
-
report
https://ubuntu.com/security/CVE-2019-7635
-
report
https://ubuntu.com/security/CVE-2019-7636
-
report
https://ubuntu.com/security/CVE-2019-7637
-
report
https://ubuntu.com/security/CVE-2019-13616