Lucene search
+L

728 matches found

osv_suse
osv_suse
•added 2020/10/26 8:24 a.m.•10 views

SUSE-SU-2020:3030-1 Security update for SDL

This update for SDL fixes the following issues: Secuirty issue fixed: - CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit bsc1141844...

8.1CVSS8.1AI score0.03729EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2020/10/21 12:00 a.m.•44 views

Scientific Linux Security Update : SDL on SL7.x x86_64 (20201001)

Security Fixes : - SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 - SDL: heap-based buffer overflow in function MSADPCMdecode in audio/SDLwave.c CVE-2019-7575 - SDL: heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c CVE-2019-7636 - SDL: heap-based buffer...

8.8CVSS6.8AI score0.03538EPSS
SaveExploits11References12
Cent OS
Cent OS
•added 2020/10/20 6:56 p.m.•160 views

SDL security update

CentOS Errata and Security Advisory CESA-2020:3868 An update for SDL is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.8CVSS6.9AI score0.03538EPSS
SaveExploits11References7
Tenable Nessus
Tenable Nessus
•added 2020/10/20 12:00 a.m.•76 views

CentOS 7 : SDL (RHSA-2020:3868)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3868 advisory. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c. CVE-2019-7572 - SDL...

8.8CVSS7.1AI score0.03538EPSS
SaveExploits11References12
BDU FSTEC
BDU FSTEC
•added 2020/10/16 12:00 a.m.•20 views

Simple DirectMedia Layer Map1toN Data Compromise

The vulnerability of the Map1toN function in the video/SDLpixels.c file in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS7AI score0.02946EPSS
SaveExploits1References28Affected Software9
Tenable Nessus
Tenable Nessus
•added 2020/10/07 12:00 a.m.•54 views

Oracle Linux 7 : SDL (ELSA-2020-3868)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3868 advisory. - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578, CVE-2019-7635, CVE-2019-7636,...

8.8CVSS6.7AI score0.03538EPSS
SaveExploits11References12
Oracle linux
Oracle linux
•added 2020/10/06 12:00 a.m.•50 views

SDL security update

1.2.15-17 - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578, CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638 - Resolves: rhbz1716201, rhbz1716202, rhbz1716206, - Resolves: rhbz1716207, rhbz1716208...

8.8CVSS1.7AI score0.03538EPSS
SaveExploits11
Veracode
Veracode
•added 2020/10/05 2:27 a.m.•53 views

XML External Entity (XXE) Injection

print-lib/print-servlet is vulnerable to XML External Entity XXE injection. A remote attacker is able to inject untrusted XML entity via tryLoadSLD as SDL parser does not disable DTDs...

9.3CVSS6.1AI score0.01342EPSS
SaveExploits0References4Affected Software3
osv_cve
osv_cve
•added 2020/10/02 8:15 p.m.•22 views

CVE-2020-15232

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

9.1CVSS6.8AI score
SaveExploits0References2
NVD
NVD
•added 2020/10/02 8:15 p.m.•34 views

CVE-2020-15232

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

9.3CVSS0.01342EPSS
SaveExploits0References2
Prion
Prion
•added 2020/10/02 8:15 p.m.•39 views

Xxe

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

6.4CVSS9.1AI score0.01342EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/10/02 7:45 p.m.•41 views

CVE-2020-15232 XML External Entity attack in mapfish-print

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

9.3CVSS9.2AI score0.01342EPSS
SaveExploits0References2
Mend
Mend
•added 2020/10/02 7:45 p.m.•7 views

CVE-2020-15232

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

9.3CVSS0.01342EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/02 12:00 a.m.•7 views

CVE-2020-15232: Improper Restriction of XML External Entity Reference

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

9.3CVSS5.7AI score0.01342EPSS
SaveExploits0References2
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•33 views

Heap-based Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer overflow. It is possible due to a flaw in SDLFillRect in video/SDLsurface.c...

8.8CVSS4.1AI score0.03098EPSS
SaveExploits1References21Affected Software1
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•42 views

Heap Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer over-read. It is possible due to a flaw in Map1toN in video/SDLpixels.c...

8.8CVSS2.3AI score0.02946EPSS
SaveExploits1References21Affected Software1
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•35 views

Heap-based Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer overflow. It is possible due to a flaw in Blit1to4 in video/SDLblit1.c...

8.1CVSS4.1AI score0.03538EPSS
SaveExploits1References27Affected Software1
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•40 views

Heap-based Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer over-read. It is possible due to a flaw in InitIMAADPCM in audio/SDLwave.c...

8.1CVSS4.1AI score0.02922EPSS
SaveExploits1References21Affected Software1
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•33 views

Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to buffer over-read. It is possible due to a flaw in function SDLLoadWAVRW in audio/SDLwave.c...

8.8CVSS3.7AI score0.03209EPSS
SaveExploits1References25Affected Software1
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•43 views

Heap Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to Heap Buffer Over-read. It is possible due to a flaw in InitMSADPCM in audio/SDLwave.c...

8.8CVSS2.3AI score0.0297EPSS
SaveExploits1References20Affected Software1
Rows per page
Query Builder