CVE-2019-7635
Fixed in a distro release EPSS 4%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
Products: libsdl simple_directmedia_layer, opensuse backports_sle, opensuse leap, debian_linux, fedoraproject fedora, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | sdl | 1.2.15-r11 |
| Alpine 3.10 | sdl2 | 2.0.10-r0 |
| Alpine 3.11 | sdl | 1.2.15-r11 |
| Alpine 3.11 | sdl2 | 2.0.10-r0 |
| Alpine 3.12 | sdl | 1.2.15-r11 |
| Alpine 3.7 | sdl | 1.2.15-r8 |
| Alpine 3.7 | sdl2 | 2.0.10-r0 |
| Alpine 3.8 | sdl | 1.2.15-r9 |
| Alpine 3.8 | sdl2 | 2.0.10-r0 |
| Alpine 3.9 | sdl | 1.2.15-r10 |
| Alpine 3.9 | sdl2 | 2.0.10-r0 |
| Amazon Linux 2 | SDL | 1.2.15-17.amzn2 |
| Amazon Linux 2 | SDL-devel | 1.2.15-17.amzn2 |
| Amazon Linux 2 | SDL-static | 1.2.15-17.amzn2 |
| Debian 10 | libsdl2 | 2.0.9+dfsg1-1+deb10u1 |
| Debian 12 | libsdl1.2 | 1.2.15+dfsg2-5 |
| Debian 12 | libsdl2 | 2.0.10+dfsg1-1 |
| Debian 12 | libsdl2-image | 2.0.5+dfsg1-1 |
| Debian 12 | sdl-image1.2 | 1.2.12-11 |
| Debian 13 | libsdl2 | 2.0.10+dfsg1-1 |
| Debian 13 | libsdl2-image | 2.0.5+dfsg1-1 |
| Debian 13 | sdl-image1.2 | 1.2.12-11 |
| Debian 14 | libsdl2 | 2.0.10+dfsg1-1 |
| Debian 14 | libsdl2-image | 2.0.5+dfsg1-1 |
| Debian 14 | sdl-image1.2 | 1.2.12-11 |
| Debian 8 | libsdl1.2 | 1.2.15-10+deb8u1 |
| Debian 8 | libsdl2 | 2.0.2+dfsg1-6+deb8u1 |
| Debian 8 | libsdl2-image | 2.0.0+dfsg-3+deb8u2 |
| Debian 8 | sdl-image1.2 | 1.2.12-5+deb8u2 |
| Debian 9 | libsdl1.2 | 1.2.15+dfsg1-4+deb9u1 |
| Debian 9 | libsdl2 | 2.0.5+dfsg1-2+deb9u1 |
| Red Hat Enterprise Linux 7 | SDL | 0:1.2.15-17.el7 |
| Red Hat Enterprise Linux 7 | SDL-debuginfo | 0:1.2.15-17.el7 |
| Red Hat Enterprise Linux 7 | SDL-devel | 0:1.2.15-17.el7 |
| Red Hat Enterprise Linux 7 | SDL-static | 0:1.2.15-17.el7 |
| Red Hat Enterprise Linux 8 | SDL | 0:1.2.15-38.el8 |
| Red Hat Enterprise Linux 8 | SDL-debuginfo | 0:1.2.15-38.el8 |
| Red Hat Enterprise Linux 8 | SDL-debugsource | 0:1.2.15-38.el8 |
| Red Hat Enterprise Linux 8 | SDL-devel | 0:1.2.15-38.el8 |
| SUSE Linux Enterprise Desktop 12 SP3 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | SDL | 1.2.15-3.9.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | SDL2 | 2.0.8-3.9.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | SDL | 1.2.13-106.11.1 |
| SUSE Linux Enterprise Server 11 SP4 | SDL | 1.2.13-106.11.1 |
| SUSE Linux Enterprise Server 12 SP3 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Server 12 SP4 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | SDL | 1.2.13-106.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | SDL | 1.2.13-106.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | SDL | 1.2.15-15.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | SDL | 1.2.15-15.11.1 |
| SUSE Package Hub 15 | SDL_image | 1.2.12+hg695-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | SDL_image | 1.2.12+hg695-bp151.4.3.1 |
| Ubuntu 16.04 LTS | libsdl1.2 | 1.2.15+dfsg1-3ubuntu0.1 |
| Ubuntu 16.04 LTS | libsdl2 | 2.0.4+dfsg1-2ubuntu2.16.04.2 |
| Ubuntu 16.04 LTS | libsdl2-image | no fix |
| Ubuntu 16.04 LTS | sdl-image1.2 | 1.2.12-5+deb9u1ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | libsdl1.2 | 1.2.15+dfsg2-0.1ubuntu0.1 |
| Ubuntu 18.04 LTS | libsdl2 | 2.0.8+dfsg1-1ubuntu1.18.04.4 |
| Ubuntu 18.04 LTS | libsdl2-image | no fix |
| Ubuntu 18.04 LTS | sdl-image1.2 | 1.2.12-8ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | libsdl1.2 | 1.2.15-8ubuntu1.1+esm1 |
| Ubuntu Pro 14.04 LTS | libsdl2-image | 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1 |
| Ubuntu Pro 14.04 LTS | sdl-image1.2 | 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1 |
| openSUSE Leap 15.0 | SDL | 1.2.15-lp150.2.3.1 |
| openSUSE Leap 15.0 | SDL2 | 2.0.8-lp150.2.3.1 |
| openSUSE Leap 15.0 | SDL_image | 1.2.12+hg695-lp151.3.3.1 |
| openSUSE Leap 15.1 | SDL_image | 1.2.12+hg695-lp151.3.3.1 |
| openSUSE Tumbleweed | SDL | 1.2.15-1.1 |
| openSUSE Tumbleweed | SDL2 | 2.32.8-1.1 |
| openSUSE Tumbleweed | SDL2 | 2.0.16-2.3 |