Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-14410

Опубликовано: 19 янв. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 5.4

Описание

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

РелизСтатусПримечание
bionic

not-affected

devel

DNE

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/bionic

not-affected

esm-infra/xenial

not-affected

focal

not-affected

groovy

not-affected

hirsute

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

2.0.14+dfsg2-3
esm-apps/bionic

released

2.0.8+dfsg1-1ubuntu1.18.04.4+esm1
esm-apps/focal

released

2.0.10+dfsg1-3ubuntu0.1~esm1
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
focal

ignored

end of standard support, was needed
groovy

ignored

end of life
hirsute

not-affected

2.0.14+dfsg2-3
impish

not-affected

2.0.14+dfsg2-3

Показывать по

EPSS

Процентиль: 37%
0.00161
Низкий

5.8 Medium

CVSS2

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
redhat
около 5 лет назад

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

CVSS3: 5.4
nvd
около 5 лет назад

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

CVSS3: 5.4
debian
около 5 лет назад

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer ...

CVSS3: 5.4
github
больше 3 лет назад

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

CVSS3: 5.4
fstec
около 5 лет назад

Уязвимость функции Blit_3or4_to_3or4__inversed_rgb (video/SDL_blit_N.c) мультимедийной библиотеки Simple DirectMedia Layer, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании

EPSS

Процентиль: 37%
0.00161
Низкий

5.8 Medium

CVSS2

5.4 Medium

CVSS3