CVE-2019-12222
CVE-2019-12222
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c.
CVSS 6.5 · Medium · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libsdl2-image Debian:12
- Affected ranges
- ECOSYSTEM: < 2.0.5+dfsg1-1
Update to 2.0.5+dfsg1-1
libsdl2-image Debian:13
- Affected ranges
- ECOSYSTEM: < 2.0.5+dfsg1-1
Update to 2.0.5+dfsg1-1
libsdl2-image Debian:14
- Affected ranges
- ECOSYSTEM: < 2.0.5+dfsg1-1
Update to 2.0.5+dfsg1-1
sdl-image1.2 Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.12-11
Update to 1.2.12-11
sdl-image1.2 Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.12-11
Update to 1.2.12-11
sdl-image1.2 Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.12-11
Update to 1.2.12-11
libsdl2-image Ubuntu:Pro:14.04:LTS
- Versions
- 2.0.0+dfsg-2
- 2.0.0+dfsg-3
- 2.0.0+dfsg-3build2
- 2.0.0+dfsg-3+deb8u1build0.14.04.1
- Affected ranges
- ECOSYSTEM: < 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1
Update to 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1
sdl-image1.2 Ubuntu:Pro:14.04:LTS
- Versions
- 1.2.12-4ubuntu1
- 1.2.12-5
- 1.2.12-5build2
- 1.2.12-5+deb9u1build0.14.04.1
- Affected ranges
- ECOSYSTEM: < 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1
Update to 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1
sdl-image1.2 Ubuntu:16.04:LTS
- Versions
- 1.2.12-5build2
- 1.2.12-5+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: < 1.2.12-5+deb9u1ubuntu0.16.04.1
Update to 1.2.12-5+deb9u1ubuntu0.16.04.1
libsdl2-image Ubuntu:16.04:LTS
- Versions
- 2.0.0+dfsg-3build2
- 2.0.1+dfsg-1
- 2.0.1+dfsg-2
- 2.0.1+dfsg-2+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
sdl-image1.2 Ubuntu:18.04:LTS
- Versions
- 1.2.12-6
- 1.2.12-7
- 1.2.12-8
- Affected ranges
- ECOSYSTEM: < 1.2.12-8ubuntu0.1
Update to 1.2.12-8ubuntu0.1
libsdl2-image Ubuntu:18.04:LTS
- Versions
- 2.0.1+dfsg-3
- 2.0.1+dfsg-4
- 2.0.2+dfsg1-1
- 2.0.3+dfsg1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://bugzilla.libsdl.org/show_bug.cgi?id=4621
- https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
- https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/
- https://usn.ubuntu.com/4238-1/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
- https://nvd.nist.gov/vuln/detail/CVE-2019-12222