CVE-2022-4743
Fixed in a distro release EPSS 1%CVSS 7.5
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
Products: libsdl simple_directmedia_layer, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | SDL2 | 2.0.10-1.amzn2.0.1 |
| Amazon Linux 2 | SDL2-devel | 2.0.10-1.amzn2.0.1 |
| Amazon Linux 2 | SDL2-static | 2.0.10-1.amzn2.0.1 |
| Debian 10 | libsdl2 | 2.0.9+dfsg1-1+deb10u1 |
| Debian 11 | libsdl2 | 2.0.14+dfsg2-3+deb11u2 |
| Debian 12 | libsdl2 | 2.26.0+dfsg-1 |
| Debian 13 | libsdl2 | 2.26.0+dfsg-1 |
| Debian 14 | libsdl2 | 2.26.0+dfsg-1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | SDL2 | 2.0.8-150200.11.9.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | SDL2 | 2.0.8-150200.11.9.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | SDL2 | 2.0.8-150200.11.9.1 |
| SUSE Package Hub 12 | SDL2 | 2.0.5-10.1 |
| Ubuntu 16.04 LTS | libsdl2 | no fix |
| Ubuntu 22.04 LTS | libsdl2 | no fix |
| Ubuntu Pro 14.04 LTS | libsdl2 | no fix |
| Ubuntu Pro 18.04 LTS | libsdl2 | no fix |
| Ubuntu Pro 20.04 LTS | libsdl2 | no fix |
| openSUSE Leap 15.4 | SDL2 | 2.0.8-150200.11.9.1 |
| openSUSE Tumbleweed | SDL2 | 2.28.5-2.1 |
| openSUSE Tumbleweed | SDL2 | 2.32.8-1.1 |