CVE-2022-34568

CVE-2022-34568 affects SDL 1.2 with a use-after-free in the XFree path (src/video/x11/SDL_x11yuv.c). Exploitation could crash the application; impact includes availability (per CVSS: HIGH) with network access and no user interaction required. Connected advisories corroborate SDL vulnerabilities i...

CVE-2022-34568

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...

CVE-2022-34568

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...

CVE-2022-34568

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2022:10067-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

com.liferay.portletmvc4spring.demo:com.liferay.portletmvc4spring.demo.applicant.jsp.portlet (>=5.1.3, <=5.1.4), com.liferay.portletmvc4spring.demo:com.liferay.portletmvc4spring.demo.applicant.thymeleaf.portlet (>=5.1.3, <=5.1.4) +154 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.1.20.release)

org.springframework:spring-web MAVEN version 5.1.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.liferay.portletmvc4spring.demo:com.liferay.portletmvc4spring.demo.applicant.jsp.portle...

openSUSE: Security Advisory for SDL (SUSE-SU-2022:1273-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OESA-2022-1645 SDL2 security update

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. Security Fixes: SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in...

SUSE: Security Advisory (SUSE-SU-2022:14943-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:1312-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : SDL (SUSE-SU-2022:14943-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14943-1 advisory. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c...

SUSE SLES12 Security Update : SDL (SUSE-SU-2022:1312-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1312-1 advisory. - SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in...

SUSE-SU-2022:1312-1 Security update for SDL

This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c. bsc1181202 - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c. bsc1181201 ...

SUSE-SU-2022:14943-1 Security update for SDL

This update for SDL fixes the following issues: - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c bsc1181201. - CVE-2019-7637: Fixed a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c bsc1124825. - CVE-2021-33657: Fix a buffer...

SUSE SLED15 / SLES15 Security Update : SDL (SUSE-SU-2022:1273-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1273-1 advisory. - SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption ...

SUSE-SU-2022:1273-1 Security update for SDL

This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c. bsc1181202 - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c. bsc1181201 ...

SUSE: Security Advisory (SUSE-SU-2022:1273-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Out-of-bounds Write

There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...

CVE-2021-33657

There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...

CVE-2021-33657

There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...