Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-12220

Опубликовано: 20 мая 2019
Источник: redhat
CVSS3: 7.3
EPSS Низкий

Описание

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.

Отчет

This issue did not affect the versions of SDL as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8 as they did not include SDL2_Image add-on.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5SDLNot affected
Red Hat Enterprise Linux 6SDLNot affected
Red Hat Enterprise Linux 7SDLNot affected
Red Hat Enterprise Linux 8SDLNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1732260SDL: out-of-bounds read in function SDL_FreePalette_REAL in video/SDL_pixels.c

EPSS

Процентиль: 73%
0.00778
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 6 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.

CVSS3: 6.5
nvd
больше 6 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.

CVSS3: 6.5
debian
больше 6 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.

suse-cvrf
больше 6 лет назад

Security update for SDL2_image

EPSS

Процентиль: 73%
0.00778
Низкий

7.3 High

CVSS3