Red Hat Security AdvisoryRHSA-2020:3868
SDL security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) SDL-1.2.15-17.el7
- Red Hat Enterprise Linux Client Optional (v. 7) SDL-devel-1.2.15-17.el7, SDL-static-1.2.15-17.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) SDL-1.2.15-17.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) SDL-devel-1.2.15-17.el7, SDL-static-1.2.15-17.el7
- Red Hat Enterprise Linux Server (v. 7) SDL-1.2.15-17.el7, SDL-1.2.15-17.el7.ppc, SDL-devel-1.2.15-17.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) SDL-static-1.2.15-17.el7, SDL-static-1.2.15-17.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) SDL-1.2.15-17.el7, SDL-devel-1.2.15-17.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) SDL-static-1.2.15-17.el7
Fixes 11 records
Priority MEDIUM 44
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03098 · Published 2019-02-08 · Partial fix CWE-787
Priority MEDIUM 44
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03209 · Published 2019-02-07 · Partial fix CWE-125
Priority MEDIUM 44
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03009 · Published 2019-02-07 · Partial fix CWE-125
Priority MEDIUM 44
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03173 · Published 2019-02-07 · Partial fix CWE-125
Priority MEDIUM 43
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02946 · Published 2019-02-08 · Partial fix CWE-125
Priority MEDIUM 43
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0297 · Published 2019-02-07 · Partial fix CWE-125
Priority MEDIUM 43
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02942 · Published 2019-02-07 · Partial fix CWE-787
Priority MEDIUM 43
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02793 · Published 2019-02-07 · Partial fix CWE-125
Priority MEDIUM 41
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.02866 · Published 2019-02-08 · Partial fix CWE-125
Priority MEDIUM 41
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.03538 · Published 2019-02-08 · Partial fix CWE-125
Priority MEDIUM 41
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.02922 · Published 2019-02-07 · Partial fix CWE-125
THREATIST.IORead the docs