SUSE-SU-2019:0899-1: SDL&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 08-04-2019Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2019:0899-1 is a vulnerability in SDL&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 11 · Downstream 0 · Related 11
CVE-2019-7572CVE-2019-7573CVE-2019-7574CVE-2019-7575CVE-2019-7576CVE-2019-7577

Timeline

  1. 08-04-2019
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for SDL This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806). - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099). - CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799). - CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805). - CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827). - CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826). - CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824). - CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803). - CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802). - CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825). - CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse8 products
  • SDL&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.2.15-15.11.1
  • SDL&distro=SUSE Linux Enterprise Desktop 12 SP4< 1.2.15-15.11.1
  • SDL&distro=SUSE Linux Enterprise Server 12 SP3< 1.2.15-15.11.1
  • SDL&distro=SUSE Linux Enterprise Server 12 SP4< 1.2.15-15.11.1
  • SDL&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 1.2.15-15.11.1

1 vendor · 8 products

References

23 links
Show all 23 references