PT-2019-17443

Name of the Vulnerable Software and Affected Versions SDL2 image version 2.0.4 Description A code execution issue exists in the XCF image rendering functionality. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted imag...

PT-2019-17442

Name of the Vulnerable Software and Affected Versions SDL2 image version 2.0.4 Description A code execution issue exists in the PCX image-rendering functionality. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted imag...

openSUSE Security Update : teeworlds (openSUSE-2019-1793)

This update for teeworlds fixes the following issues : - CVE-2019-10879: An integer overflow in CDataFileReader::Open could have lead to a buffer overflow and possibly remote code execution, because size-related multiplications were mishandled. boo1131729 - CVE-2019-10878: A failed bounds check i...

CVE-2019-12218

An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a NULL pointer dereference in the SDL2image function IMGLoadPCXRW at IMGpcx.c...

Security update for teeworlds (moderate)

openSUSE Security Update: Security update for teeworlds Announcement ID: openSUSE-SU-2019:1793-1 Rating: moderate References: 1112910 1131729 Cross-References: CVE-2018-18541 CVE-2019-10877 CVE-2019-10878 CVE-2019-10879 Affected Products: openSUSE Leap 15.1 An update that fixes four vulnerabiliti...

CVE-2019-13626

An out-of-bounds read flaw was discovered in SDL2, in the way that WAVE files are loaded through the SDLLoadWAVRW function. An application that uses SDL2 and loads untrusted input files may be vulnerable to this flaw. An attacker can abuse this flaw to crash the application or to leak data from t...

PT-2019-17445

Name of the Vulnerable Software and Affected Versions SDL2 image version 2.0.4 Description A code execution issue exists in the XPM image rendering function. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can th...

ALPINE-CVE-2019-5052

An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, which can lead to a buffer overflow and potential code execution. An attacker can provide a...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound. An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, whi...

UBUNTU-CVE-2019-5051

An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability...

PT-2019-17437

Name of the Vulnerable Software and Affected Versions SDL2 image version 2.0.4 Description A heap-based buffer overflow issue exists when loading a PCX file. This is due to a missing error handler, which can lead to a buffer overflow and potential code execution. An attacker can trigger this issu...

PT-2019-17438

Name of the Vulnerable Software and Affected Versions SDL2 image version 2.0.4 Description An integer overflow issue occurs when loading a PCX file, which can be exploited by providing a specially crafted image file. This can cause an integer overflow, resulting in insufficient memory allocation,...

openSUSE: Security Advisory for SDL2 (openSUSE-SU-2019:1632-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : SDL2 (openSUSE-2019-1633)

This update for SDL2 fixes the following issues : - Remove the fix for CVE-2019-7637, the modification of function SDLCalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. bsc1134135 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Securit...

openSUSE Security Update : SDL2 (openSUSE-2019-1632)

This update for SDL2 fixes the following issues : - Remove the fix for CVE-2019-7637, the modification of function SDLCalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. bsc1134135 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C...

OPENSUSE-SU-2019:1633-1 Security update for SDL2

This update for SDL2 fixes the following issues: - Remove the fix for CVE-2019-7637, the modification of function SDLCalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. bsc1134135 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1632-1 Security update for SDL2

This update for SDL2 fixes the following issues: - Remove the fix for CVE-2019-7637, the modification of function SDLCalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. bsc1134135 This update was imported from the SUSE:SLE-15:Update update project...

Security update for SDL2 (moderate)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2019:1632-1 Rating: moderate References: 1124825 1134135 Cross-References: CVE-2019-7637 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available. Description:...

Security update for SDL2 (moderate)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2019:1633-1 Rating: moderate References: 1124825 1134135 Cross-References: CVE-2019-7637 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description:...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:1605-1)

This update for SDL2 fixes the following issues : Remove the fix for CVE-2019-7637, the modification of function SDLCalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. bsc1134135 Note that Tenable Network Security has extracted the preceding description block directly from t...