Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-12216

Опубликовано: 20 мая 2019
Источник: redhat
CVSS3: 7.3
EPSS Низкий

Описание

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.

Отчет

This issue did not affect the versions of SDL as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8 as they did not include SDL2_Image add-on.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5SDLNot affected
Red Hat Enterprise Linux 6SDLNot affected
Red Hat Enterprise Linux 7SDLNot affected
Red Hat Enterprise Linux 8SDLNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1732252SDL: heap-based buffer overflow in function SDL2_image function IMG_LoadPCX_RW in IMG_pcx.c

EPSS

Процентиль: 78%
0.01128
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 6 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.

CVSS3: 6.5
nvd
больше 6 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.

CVSS3: 6.5
debian
больше 6 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.

CVSS3: 6.5
fstec
почти 7 лет назад

Уязвимость функции SDL2_image IMG_LoadPCX_RW библиотеки Simple DirectMedia Layer, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 78%
0.01128
Низкий

7.3 High

CVSS3