CVE-2019-12219
CVE-2019-12219
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.
CVSS 8.8 · High · EPSS 2.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libsdl2-image Debian:12
- Affected ranges
- ECOSYSTEM: < 2.0.5+dfsg1-1
Update to 2.0.5+dfsg1-1
libsdl2-image Debian:13
- Affected ranges
- ECOSYSTEM: < 2.0.5+dfsg1-1
Update to 2.0.5+dfsg1-1
libsdl2-image Debian:14
- Affected ranges
- ECOSYSTEM: < 2.0.5+dfsg1-1
Update to 2.0.5+dfsg1-1
sdl-image1.2 Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.12-11
Update to 1.2.12-11
sdl-image1.2 Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.12-11
Update to 1.2.12-11
sdl-image1.2 Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.12-11
Update to 1.2.12-11
libsdl2-image Ubuntu:Pro:14.04:LTS
- Versions
- 2.0.0+dfsg-2
- 2.0.0+dfsg-3
- 2.0.0+dfsg-3build2
- 2.0.0+dfsg-3+deb8u1build0.14.04.1
- Affected ranges
- ECOSYSTEM: < 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1
Update to 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1
sdl-image1.2 Ubuntu:Pro:14.04:LTS
- Versions
- 1.2.12-4ubuntu1
- 1.2.12-5
- 1.2.12-5build2
- 1.2.12-5+deb9u1build0.14.04.1
- Affected ranges
- ECOSYSTEM: < 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1
Update to 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1
sdl-image1.2 Ubuntu:16.04:LTS
- Versions
- 1.2.12-5build2
- 1.2.12-5+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: < 1.2.12-5+deb9u1ubuntu0.16.04.1
Update to 1.2.12-5+deb9u1ubuntu0.16.04.1
libsdl2-image Ubuntu:16.04:LTS
- Versions
- 2.0.0+dfsg-3build2
- 2.0.1+dfsg-1
- 2.0.1+dfsg-2
- 2.0.1+dfsg-2+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
sdl-image1.2 Ubuntu:18.04:LTS
- Versions
- 1.2.12-6
- 1.2.12-7
- 1.2.12-8
- Affected ranges
- ECOSYSTEM: < 1.2.12-8ubuntu0.1
Update to 1.2.12-8ubuntu0.1
libsdl2-image Ubuntu:18.04:LTS
- Versions
- 2.0.1+dfsg-3
- 2.0.1+dfsg-4
- 2.0.2+dfsg1-1
- 2.0.3+dfsg1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://bugzilla.libsdl.org/show_bug.cgi?id=4625
- https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
- https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/
- https://usn.ubuntu.com/4238-1/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
- https://nvd.nist.gov/vuln/detail/CVE-2019-12219