Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2020-14409
HistoryJan 19, 2021 - 8:15 p.m.

CVE-2020-14409

2021-01-1920:15:12
CWE-787
CWE-190
mitre
web.nvd.nist.gov
85
7
cve-2020-14409
sdl
simple directmedia layer
integer overflow
heap corruption
sdl_blitcopy
video/sdl_blit_copy.c
bmp file

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

46.8%

JSON

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

Affected configurations

Nvd
Node
libsdlsimple_directmedia_layerRange2.0.12–2.0.20
Node
fedoraprojectfedoraMatch33
Node
debiandebian_linuxMatch9.0
Node
starwindsoftwarestarwind_virtual_sanMatchv8build12533vsphere
OR
starwindsoftwarestarwind_virtual_sanMatchv8build12658vsphere
OR
starwindsoftwarestarwind_virtual_sanMatchv8build12859vsphere
OR
starwindsoftwarestarwind_virtual_sanMatchv8build13170vsphere
OR
starwindsoftwarestarwind_virtual_sanMatchv8build13586vsphere
OR
starwindsoftwarestarwind_virtual_sanMatchv8build13861vsphere
VendorProductVersionCPE
libsdlsimple_directmedia_layer*cpe:2.3:a:libsdl:simple_directmedia_layer:*:*:*:*:*:*:*:*
fedoraprojectfedora33cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
debiandebian_linux9.0cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
starwindsoftwarestarwind_virtual_sanv8cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12533:*:*:*:vsphere:*:*
starwindsoftwarestarwind_virtual_sanv8cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12658:*:*:*:vsphere:*:*
starwindsoftwarestarwind_virtual_sanv8cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12859:*:*:*:vsphere:*:*
starwindsoftwarestarwind_virtual_sanv8cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13170:*:*:*:vsphere:*:*
starwindsoftwarestarwind_virtual_sanv8cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13586:*:*:*:vsphere:*:*
starwindsoftwarestarwind_virtual_sanv8cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13861:*:*:*:vsphere:*:*

Social References

More

Related

redhatcve 1
prion 1
debiancve 1
osv 5
cvelist 1
nvd 1
suse 3
fedora 1
mageia 1
ubuntucve 2
nessus 12
openvas 13
ubuntu 1
gentoo 1
debian 2
redhatcve
redhatcve
CVE-2020-14409
2021-01-26 11:23:47
prion
prion
Integer overflow
2021-01-19 20:15:00
debiancve
debiancve
CVE-2020-14409
2021-01-19 20:15:12
osv
osv
CVE-2020-14409
2021-01-19 20:15:12
libsdl2 vulnerabilities
2022-02-07 17:06:17
libsdl2 - security update
2021-01-30 00:00:00
cvelist
cvelist
CVE-2020-14409
2021-01-19 00:00:00
nvd
nvd
CVE-2020-14409
2021-01-19 20:15:12
suse
suse
Security update for SDL2 (important)
2022-02-14 00:00:00
Security update for SDL2 (important)
2022-04-07 00:00:00
Security update for SDL (important)
2022-04-20 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: mingw-SDL2-2.0.12-3.fc33
2021-02-06 01:18:27
mageia
mageia
Updated sdl2 packages fix security vulnerabilities
2021-04-30 23:16:14
ubuntucve
ubuntucve
CVE-2020-14409
2021-01-19 00:00:00
CVE-2020-14410
2021-01-19 00:00:00
nessus
nessus
Ubuntu 18.04 ESM / 20.04 ESM : Simple DirectMedia Layer vulnerabilities (USN-5274-1)
2023-10-16 00:00:00
SUSE SLES15 Security Update : SDL2 (SUSE-SU-2022:0825-1)
2022-03-15 00:00:00
GLSA-202107-55 : SDL 2: Multiple vulnerabilities
2022-01-24 00:00:00
openvas
openvas
openSUSE: Security Advisory for SDL2 (openSUSE-SU-2022:0104-1)
2022-02-08 00:00:00
openSUSE: Security Advisory for SDL2 (openSUSE-SU-2022:0104-2)
2022-02-15 00:00:00
Mageia: Security Advisory (MGASA-2021-0201)
2022-01-28 00:00:00
ubuntu
ubuntu
Simple DirectMedia Layer vulnerabilities
2022-02-07 00:00:00
gentoo
gentoo
SDL 2: Multiple vulnerabilities
2021-07-24 00:00:00
debian
debian
[SECURITY] [DLA 2536-1] libsdl2 security update
2021-01-30 21:46:49
[SECURITY] [DLA 3314-1] libsdl2 security update
2023-02-08 23:49:17

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

46.8%

JSON
Related for CVE-2020-14409
redhatcve1prion1debiancve1osv5cvelist1nvd1suse3fedora1mageia1ubuntucve2nessus12openvas13ubuntu1gentoo1debian2