Veracode Vulnerability DatabaseVERACODE:27458Buffer Over-read
0.005 Low
EPSS
Percentile
77.1%
Simple DirectMedia Layer (SDL) is vulnerable to buffer over-read. It is possible due to a flaw in function SDL_LoadWAV_RW in audio/SDL_wave.c.
References
lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html
lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html
lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
access.redhat.com/errata/RHSA-2020:3868
access.redhat.com/security/updates/classification/#moderate
bugzilla.libsdl.org/show_bug.cgi?id=4492
discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720
lists.debian.org/debian-lts-announce/2019/03/msg00015.html
lists.debian.org/debian-lts-announce/2019/03/msg00016.html
lists.debian.org/debian-lts-announce/2019/10/msg00020.html
lists.debian.org/debian-lts-announce/2019/10/msg00021.html
lists.debian.org/debian-lts-announce/2021/01/msg00024.html
lists.debian.org/debian-lts-announce/2021/10/msg00032.html
lists.debian.org/debian-lts-announce/2023/02/msg00008.html
lists.fedoraproject.org/archives/list/[email protected]/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/
lists.fedoraproject.org/archives/list/[email protected]/message/MD6EIV2CS6QNDU3UN2RVXPQOFQNHXCP7/
lists.fedoraproject.org/archives/list/[email protected]/message/UFYUCO6D5APPM7IOZ5WOCYVY4DKSXFKD/
security.gentoo.org/glsa/201909-07
usn.ubuntu.com/4156-1/
usn.ubuntu.com/4156-2/
Related
