Scientific Linux Security Update : SDL on SL7.x x86_64 (20191202)

Security Fixes : - SDL: CVE-2019-13616 not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950 CVE-2019-14906 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid131679; scriptversion"1.5";...

Denial Of Service (DoS)

SDL is vulnerable to denial of service DoS. The vulnerability exists due to an incomplete fix from CVE-2019-13616, found in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950, through the possibility of heap buffer overflow in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in...

RHEL 7 : SDL (RHSA-2019:4024)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4024 advisory. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...

Oracle Linux 7 : SDL (ELSA-2019-4024)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4024 advisory. - Fix CVE-2019-13616 a heap buffer over-read in BlitNtoN bug 1747237 Tenable has extracted the preceding description block directly from the Oracle Lin...

SDL: not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application tha...

SDL security update

1.2.15-15 - Fix CVE-2019-13616 a heap buffer over-read in BlitNtoN bug 1747237 - Resolves: rhbz1756276...

CVE-2019-14906

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application tha...

Oracle Linux 8 : SDL (ELSA-2019-3951)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3951 advisory. - Fix CVE-2019-13616 a heap buffer over-read in BlitNtoN bug 1747237 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Denial Of Service(DoS)

Simple DirectMedia Layer SDL is vulnerable to denial of service DoS. The vulnerability is due to the possibility of heap buffer overflow in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...

RHEL 7 : SDL (RHSA-2019:3950)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3950 advisory. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...

RHEL 8 : SDL (RHSA-2019:3951)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3951 advisory. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...

Important: Red Hat Security Advisory: SDL security update

An update for SDL is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

EulerOS 2.0 SP8 : SDL (EulerOS-SA-2019-2117)

According to the version of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized...

EulerOS 2.0 SP5 : SDL (EulerOS-SA-2019-2187)

According to the version of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from...

EulerOS 2.0 SP3 : SDL (EulerOS-SA-2019-2241)

According to the version of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from...

USN-4156-2: SDL vulnerabilities

USN-4156-1 fixed several vulnerabilities in SDL. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that SDL incorrectly handled certain images. If a user were tricked into opening a crafted image file, a remote...

Ubuntu 16.04 LTS / 18.04 LTS : SDL vulnerabilities (USN-4156-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4156-1 advisory. It was discovered that SDL incorrectly handled certain images. If a user were tricked into opening a crafted image file, a remote attacker...

USN-4156-1: SDL vulnerabilities

It was discovered that SDL incorrectly handled certain images. If a user were tricked into opening a crafted image file, a remote attacker could use this issue to cause SDL to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2019-13616

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...

[ASA-201910-8] sdl: arbitrary code execution

Arch Linux Security Advisory ASA-201910-8 ========================================= Severity: High Date : 2019-10-11 CVE-ID : CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 CVE-2019-13616...