CVE-2019-7577

Description

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

8.471

Associated Vulnerability

Vulnerability	OS Platform
Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg1-3ubuntu0.1_i386.deb	Linux
Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg1-3ubuntu0.1_amd64.deb	Linux
Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg2-0.1ubuntu0.1_i386.deb	Linux
Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg2-0.1ubuntu0.1_amd64.deb	Linux
(RHSA-2020:3868) SDL security update SDL-1.2.15-17.el7.i686.rpm	Linux
(RHSA-2020:3868) SDL security update SDL-1.2.15-17.el7.x86_64.rpm	Linux
(RHSA-2020:3868) SDL security update SDL-devel-1.2.15-17.el7.i686.rpm	Linux
(RHSA-2020:3868) SDL security update SDL-devel-1.2.15-17.el7.x86_64.rpm	Linux
(RHSA-2020:3868) SDL security update SDL-static-1.2.15-17.el7.i686.rpm	Linux
(RHSA-2020:3868) SDL security update SDL-static-1.2.15-17.el7.x86_64.rpm	Linux
(RHSA-2020:4627) SDL security update SDL-1.2.15-38.el8.i686.rpm	Linux
(RHSA-2020:4627) SDL security update SDL-1.2.15-38.el8.x86_64.rpm	Linux
(RHSA-2020:4627) SDL security update SDL-debugsource-1.2.15-38.el8.i686.rpm	Linux
(RHSA-2020:4627) SDL security update SDL-debugsource-1.2.15-38.el8.x86_64.rpm	Linux
(RHSA-2020:4627) SDL security update SDL-devel-1.2.15-38.el8.i686.rpm	Linux
(RHSA-2020:4627) SDL security update SDL-devel-1.2.15-38.el8.x86_64.rpm	Linux
(CESA-2020:3868) SDL security update SDL-1.2.15-17.el7.x86_64.rpm	Linux
(CESA-2020:3868) SDL security update SDL-devel-1.2.15-17.el7.x86_64.rpm	Linux
(CESA-2020:3868) SDL security update SDL-static-1.2.15-17.el7.x86_64.rpm	Linux
(RHSA-2020:3868)Moderate: security update SDL-debuginfo-1.2.15-17.el7.i686.rpm	Linux
(RHSA-2020:3868)Moderate: security update SDL-debuginfo-1.2.15-17.el7.x86_64.rpm	Linux
(RHSA-2020:4627)Moderate: security update SDL-debuginfo-1.2.15-38.el8.i686.rpm	Linux
(RHSA-2020:4627)Moderate: security update SDL-debuginfo-1.2.15-38.el8.x86_64.rpm	Linux
SDL update (ELSA-2020-3868) SDL-1.2.15-17.el7.i686.rpm	Linux
SDL update (ELSA-2020-3868) SDL-1.2.15-17.el7.x86_64.rpm	Linux
SDL-devel update (ELSA-2020-3868) SDL-devel-1.2.15-17.el7.i686.rpm	Linux
SDL-devel update (ELSA-2020-3868) SDL-devel-1.2.15-17.el7.x86_64.rpm	Linux
SDL update (ELSA-2020-4627) SDL-1.2.15-38.el8.i686.rpm	Linux
SDL update (ELSA-2020-4627) SDL-1.2.15-38.el8.x86_64.rpm	Linux
SDL-devel update (ELSA-2020-4627) SDL-devel-1.2.15-38.el8.i686.rpm	Linux
SDL-devel update (ELSA-2020-4627) SDL-devel-1.2.15-38.el8.x86_64.rpm	Linux
SDL Security Update (ALAS-2020-1500) SDL-1.2.15-17.amzn2.i686.rpm	Linux
SDL Security Update (ALAS-2020-1500) SDL-1.2.15-17.amzn2.x86_64.rpm	Linux
SDL Security Update (ALAS-2020-1500) SDL-devel-1.2.15-17.amzn2.x86_64.rpm	Linux
SDL Security Update (ALAS-2020-1500) SDL-static-1.2.15-17.amzn2.x86_64.rpm	Linux
Out-of-bounds Read Vulnerability (CVE-2019-7577)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234