Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2019:4024
HistoryDec 06, 2019 - 11:34 p.m.

SDL security update

2019-12-0623:34:45
CentOS Project
lists.centos.org
209

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.8%

JSON

CentOS Errata and Security Advisory CESA-2019:4024

Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.

Security Fix(es):

  • SDL: CVE-2019-13616 not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950 (CVE-2019-14906)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2019-December/085700.html

Affected packages:
SDL
SDL-devel
SDL-static

Upstream details at:
https://access.redhat.com/errata/RHSA-2019:4024

Related

openvas 31
cve 2
nessus 42
prion 2
oraclelinux 3
redhatcve 2
veracode 2
redhat 4
amazon 2
fedora 6
debiancve 1
osv 4
suse 8
ubuntucve 1
mageia 3
alpinelinux 1
debian 3
ubuntu 3
archlinux 1
gentoo 1
openvas
openvas
CentOS Update for SDL CESA-2019:4024 centos7
2019-12-07 00:00:00
Fedora Update for SDL FEDORA-2019-f5558abfef
2020-01-09 00:00:00
Huawei EulerOS: Security Advisory for SDL (EulerOS-SA-2019-2241)
2020-01-23 00:00:00
cve
cve
CVE-2019-14906
2020-01-07 21:15:00
CVE-2019-13616
2019-07-16 17:15:00
nessus
nessus
Virtuozzo 7 : SDL / SDL-devel / SDL-static (VZLSA-2019-4024)
2020-12-10 00:00:00
CentOS 7 : SDL (CESA-2019:4024)
2019-12-09 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : SDL Vulnerability (NS-SA-2020-0007)
2020-01-20 00:00:00
prion
prion
Heap overflow
2020-01-07 21:15:00
Heap overflow
2019-07-16 17:15:00
oraclelinux
oraclelinux
SDL security update
2019-12-02 00:00:00
SDL security update
2019-11-25 00:00:00
GStreamer, libmad, and SDL security, bug fix, and enhancement update
2020-05-05 00:00:00
redhatcve
redhatcve
CVE-2019-14906
2019-11-27 15:48:05
CVE-2019-13616
2019-08-30 00:58:57
veracode
veracode
Denial Of Service (DoS)
2019-12-03 00:23:29
Denial Of Service(DoS)
2019-11-26 00:17:23
redhat
redhat
(RHSA-2019:4024) Important: SDL security update
2019-12-02 08:29:50
(RHSA-2020:0293) Important: SDL security update
2020-01-30 08:38:04
(RHSA-2019:3951) Important: SDL security update
2019-11-25 11:49:31
amazon
amazon
Important: SDL
2019-12-13 19:38:00
Important: SDL2
2019-10-21 18:01:00
fedora
fedora
[SECURITY] Fedora 29 Update: SDL2-2.0.10-1.fc29
2019-10-10 16:19:42
[SECURITY] Fedora 31 Update: SDL-1.2.15-42.fc31
2019-09-14 16:38:50
[SECURITY] Fedora 30 Update: SDL-1.2.15-41.fc30
2019-09-08 02:59:49
debiancve
debiancve
CVE-2019-13616
2019-07-16 17:15:00
osv
osv
CVE-2019-13616
2019-07-16 17:15:12
libsdl2 - security update
2021-01-30 00:00:00
libsdl1.2 - security update
2021-10-31 00:00:00
suse
suse
Security update for SDL (moderate)
2020-11-14 00:00:00
Security update for SDL (moderate)
2020-11-21 00:00:00
Security update for SDL2 (moderate)
2019-10-01 00:00:00
ubuntucve
ubuntucve
CVE-2019-13616
2019-10-15 00:00:00
mageia
mageia
Updated SDL12 packages fix security vulnerability
2019-09-07 00:09:08
Updated sdl2_image packages fix security vulnerabilities
2019-12-06 17:15:42
Updated SDL_image packages fix security vulnerabilities
2019-12-06 17:15:42
alpinelinux
alpinelinux
CVE-2019-13616
2019-07-16 17:15:00
debian
debian
[SECURITY] [DLA 2536-1] libsdl2 security update
2021-01-30 22:30:22
[SECURITY] [DLA 2804-1] libsdl1.2 security update
2021-10-31 16:41:05
[SECURITY] [DLA 3314-1] libsdl2 security update
2023-02-08 23:49:35
ubuntu
ubuntu
SDL vulnerabilities
2019-10-16 00:00:00
SDL vulnerabilities
2019-10-15 00:00:00
SDL_image vulnerabilities
2020-01-14 00:00:00
archlinux
archlinux
[ASA-201910-8] sdl: arbitrary code execution
2019-10-11 00:00:00
gentoo
gentoo
libsdl: Multiple Vulnerabilities
2023-05-03 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.8%

JSON
Related for CESA-2019:4024
openvas31cve2nessus42prion2oraclelinux3redhatcve2veracode2redhat4amazon2fedora6debiancve1osv4suse8ubuntucve1mageia3alpinelinux1debian3ubuntu3archlinux1gentoo1