CVE-2020-15232

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

Xxe

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

CVE-2020-15232 XML External Entity attack in mapfish-print

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

Heap-based Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer overflow. It is possible due to a flaw in SDLFillRect in video/SDLsurface.c...

Heap Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer over-read. It is possible due to a flaw in Map1toN in video/SDLpixels.c...

Heap-based Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer overflow. It is possible due to a flaw in Blit1to4 in video/SDLblit1.c...

Heap-based Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer over-read. It is possible due to a flaw in InitIMAADPCM in audio/SDLwave.c...

Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to buffer over-read. It is possible due to a flaw in function SDLLoadWAVRW in audio/SDLwave.c...

Heap Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer overflow. It is possible due to a flaw in function MSADPCMdecode in audio/SDLwave.c...

Heap Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to Heap Buffer Over-read. It is possible due to a flaw in InitMSADPCM in audio/SDLwave.c...

SDL: buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDLLoadWAVRW in audio/SDLwave.c...

SDL: buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c...

Moderate: Red Hat Security Advisory: SDL security update

An update for SDL is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

sdlgrahampenny.co.uk Cross Site Scripting vulnerability OBB-1236421

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

GHSA-VJV6-GQ77-3MJW XXE attack in Mapfish Print

Impact A user can do to an XML External Entity XXE attack with the provided SDL style. Patches Use version = 3.24 Workarounds No References https://cwe.mitre.org/data/definitions/611.html https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e For more...

XXE attack in Mapfish Print

Impact A user can do to an XML External Entity XXE attack with the provided SDL style. Patches Use version = 3.24 Workarounds No References https://cwe.mitre.org/data/definitions/611.html https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e For more...

Huawei EulerOS: Security Advisory for SDL (EulerOS-SA-2020-1740)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : SDL (EulerOS-SA-2020-1740)

According to the versions of the SDL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in...

CVE-2019-19721

An off-by-one error in the DecodeBlock function in codec/sdlimage.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service memory corruption via a crafted image file. NOTE: this may be related to the SDLImage product...

DEBIAN-CVE-2019-19721

An off-by-one error in the DecodeBlock function in codec/sdlimage.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service memory corruption via a crafted image file. NOTE: this may be related to the SDLImage product...