CVE-2019-13616
Fixed in a distro release EPSS 4%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
Products: libsdl simple_directmedia_layer, debian_linux, opensuse backports_sle, opensuse leap, fedoraproject fedora, canonical ubuntu_linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | sdl | 1.2.15-r12 |
| Alpine 3.10 | sdl_image | 1.2.12-r5 |
| Alpine 3.11 | sdl | 1.2.15-r12 |
| Alpine 3.11 | sdl2_image | 2.0.5-r1 |
| Alpine 3.11 | sdl_image | 1.2.12-r5 |
| Alpine 3.12 | sdl | 1.2.15-r12 |
| Alpine 3.7 | sdl | 1.2.15-r9 |
| Alpine 3.7 | sdl_image | 1.2.12-r4 |
| Alpine 3.8 | sdl | 1.2.15-r10 |
| Alpine 3.8 | sdl_image | 1.2.12-r5 |
| Alpine 3.9 | sdl | 1.2.15-r11 |
| Alpine 3.9 | sdl_image | 1.2.12-r5 |
| Amazon Linux 2 | SDL | 1.2.15-15.amzn2 |
| Amazon Linux 2 | SDL-devel | 1.2.15-15.amzn2 |
| Amazon Linux 2 | SDL-static | 1.2.15-15.amzn2 |
| Amazon Linux 2 | SDL2 | 2.0.10-1.amzn2 |
| Amazon Linux 2 | SDL2-devel | 2.0.10-1.amzn2 |
| Amazon Linux 2 | SDL2-static | 2.0.10-1.amzn2 |
| Debian 10 | libsdl2 | 2.0.9+dfsg1-1+deb10u1 |
| Debian 12 | libsdl1.2 | 1.2.15+dfsg2-5 |
| Debian 12 | libsdl2 | 2.0.10+dfsg1-1 |
| Debian 12 | libsdl2-image | 2.0.5+dfsg1-2 |
| Debian 12 | sdl-image1.2 | 1.2.12-12 |
| Debian 13 | libsdl2 | 2.0.10+dfsg1-1 |
| Debian 13 | libsdl2-image | 2.0.5+dfsg1-2 |
| Debian 13 | sdl-image1.2 | 1.2.12-12 |
| Debian 14 | libsdl2 | 2.0.10+dfsg1-1 |
| Debian 14 | libsdl2-image | 2.0.5+dfsg1-2 |
| Debian 14 | sdl-image1.2 | 1.2.12-12 |
| Debian 9 | libsdl1.2 | 1.2.15+dfsg1-4+deb9u1 |
| Debian 9 | libsdl2 | 2.0.5+dfsg1-2+deb9u1 |
| Red Hat Enterprise Linux 7 | SDL | 0:1.2.15-14.el7_7 |
| Red Hat Enterprise Linux 7 | SDL-debuginfo | 0:1.2.15-14.el7_7 |
| Red Hat Enterprise Linux 7 | SDL-devel | 0:1.2.15-14.el7_7 |
| Red Hat Enterprise Linux 7 | SDL-static | 0:1.2.15-14.el7_7 |
| Red Hat Enterprise Linux 8 | SDL | 0:1.2.15-36.el8_1 |
| Red Hat Enterprise Linux 8 | SDL-debuginfo | 0:1.2.15-36.el8_1 |
| Red Hat Enterprise Linux 8 | SDL-debugsource | 0:1.2.15-36.el8_1 |
| Red Hat Enterprise Linux 8 | SDL-devel | 0:1.2.15-36.el8_1 |
| Red Hat rhel e4s 8.0 | SDL | 0:1.2.15-33.el8_0 |
| Red Hat rhel e4s 8.0 | SDL-debuginfo | 0:1.2.15-33.el8_0 |
| Red Hat rhel e4s 8.0 | SDL-debugsource | 0:1.2.15-33.el8_0 |
| Red Hat rhel e4s 8.0 | SDL-devel | 0:1.2.15-33.el8_0 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | SDL2 | 2.0.8-3.15.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | SDL | 1.2.15-3.12.73 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | SDL2 | 2.0.8-3.15.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 | SDL | 1.2.15-3.12.73 |
| SUSE Linux Enterprise Module for Package Hub 15 SP1 | SDL2 | 2.0.8-3.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | SDL | 1.2.15-15.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | SDL | 1.2.15-15.14.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | SDL | 1.2.15-15.14.2 |
| SUSE Package Hub 15 | SDL2_image | 2.0.5-bp151.4.3.1 |
| SUSE Package Hub 15 | SDL_image | 1.2.12+hg695-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | SDL2_image | 2.0.5-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | SDL_image | 1.2.12+hg695-bp151.4.3.1 |
| Ubuntu 16.04 LTS | libsdl1.2 | 1.2.15+dfsg1-3ubuntu0.1 |
| Ubuntu 16.04 LTS | libsdl2 | no fix |
| Ubuntu 16.04 LTS | libsdl2-image | no fix |
| Ubuntu 16.04 LTS | sdl-image1.2 | 1.2.12-5+deb9u1ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | libsdl1.2 | 1.2.15+dfsg2-0.1ubuntu0.1 |
| Ubuntu 18.04 LTS | libsdl2-image | no fix |
| Ubuntu 18.04 LTS | sdl-image1.2 | 1.2.12-8ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | libsdl1.2 | 1.2.15-8ubuntu1.1+esm1 |
| Ubuntu Pro 14.04 LTS | libsdl2 | no fix |
| Ubuntu Pro 14.04 LTS | libsdl2-image | no fix |
| Ubuntu Pro 14.04 LTS | sdl-image1.2 | 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1 |
| Ubuntu Pro 18.04 LTS | libsdl2 | no fix |
| openSUSE Leap 15.0 | SDL2 | 2.0.8-lp150.2.9.1 |
| openSUSE Leap 15.0 | SDL2_image | 2.0.5-lp151.2.5.1 |
| openSUSE Leap 15.0 | SDL_image | 1.2.12+hg695-lp151.3.3.1 |
| openSUSE Leap 15.1 | SDL | 1.2.15-lp151.4.3.1 |
| openSUSE Leap 15.1 | SDL2 | 2.0.8-lp151.4.6.1 |
| openSUSE Leap 15.1 | SDL2_image | 2.0.5-lp151.2.5.1 |
| openSUSE Leap 15.1 | SDL_image | 1.2.12+hg695-lp151.3.3.1 |
| openSUSE Leap 15.2 | SDL | 1.2.15-lp152.5.3.1 |
| openSUSE Tumbleweed | SDL | 1.2.15-1.1 |
| openSUSE Tumbleweed | SDL2 | 2.32.8-1.1 |
| openSUSE Tumbleweed | SDL2 | 2.0.16-2.3 |