CVE-2019-7577

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html · Mailing List
• bugzilla.libsdl.org/show_bug.cgi · Exploit
• discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720 · Vendor Advisory
• lists.debian.org/debian-lts-announce/2019/03/msg00015.html · Mailing List
• lists.debian.org/debian-lts-announce/2019/03/msg00016.html · Mailing List
• lists.debian.org/debian-lts-announce/2019/10/msg00020.html · Mailing List
• lists.debian.org/debian-lts-announce/2019/10/msg00021.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/01/msg00024.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/10/msg00032.html · Mailing List
• lists.debian.org/debian-lts-announce/2023/02/msg00008.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MD6EIV2CS6QNDU3UN2RVXPQOFQNHXCP7
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFYUCO6D5APPM7IOZ5WOCYVY4DKSXFKD
• security.gentoo.org/glsa/201909-07 · Third Party Advisory
• security.gentoo.org/glsa/202305-17
• usn.ubuntu.com/4156-1 · Third Party Advisory
• usn.ubuntu.com/4156-2 · Third Party Advisory

simple directmedia layer のその他の脆弱性

• CVE-2022-4743高 7.5A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an atta…
• CVE-2022-34568高 7.5SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
• CVE-2021-33657高 8.8There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BM…
• CVE-2020-14410中 5.4SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via…
• CVE-2020-14409高 7.8SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SD…