CVE-2022-4743

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-4743
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4743.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-4743
Related
Published
2023-01-12T19:15:24Z
Modified
2024-09-18T03:22:43.006530Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A potential memory leak issue was discovered in SDL2 in GLESCreateTexture() function in SDLrender_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

References

Affected packages

Debian:11 / libsdl2

Package

Name
libsdl2
Purl
pkg:deb/debian/libsdl2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.14+dfsg2-3
2.0.14+dfsg2-3+deb11u1
2.0.16+dfsg1-1
2.0.16+dfsg1-2
2.0.16+dfsg1-3
2.0.16+dfsg1-4
2.0.16+dfsg1-5
2.0.16+dfsg1-6
2.0.16+dfsg1-7
2.0.18+dfsg-1
2.0.18+dfsg-2
2.0.18+dfsg-3
2.0.18+dfsg-4
2.0.18+dfsg-5
2.0.20+dfsg-1
2.0.20+dfsg-2
2.0.22~rc1+dfsg-1
2.0.22~rc1+git20220418+dfsg-1
2.0.22~rc2+dfsg-1
2.0.22~rc3+dfsg-1
2.0.22+dfsg-1
2.0.22+dfsg-2
2.0.22+dfsg-3
2.0.22+dfsg-4
2.0.22+dfsg-5
2.0.22+dfsg-6
2.0.22+git20220508.gc71ee68+dfsg-1
2.0.22+git20220518.g4cb57bf+dfsg-1
2.0.22+git20220524+g5dee082+dfsg-1
2.0.22+git20220530+g3c3c025+dfsg-1
2.0.22+git20220612+gbdf1413+dfsg-1
2.0.22+git20220615+g960b86d+dfsg-1
2.23.1+dfsg-1
2.23.2+dfsg-1
2.23.2+dfsg-2
2.23.2+dfsg-3
2.23.2+dfsg-4
2.24.0+dfsg-1
2.24.0+dfsg-2
2.24.1+dfsg-1
2.24.2+dfsg-1
2.25.1+dfsg-1
2.26.0+dfsg-1
2.26.1+dfsg-1
2.26.2+dfsg-1
2.26.3+dfsg-1
2.26.4+dfsg-1
2.26.5+dfsg-1
2.27~git20230103+dfsg-1
2.27~git20230207+dfsg-1
2.27~git20230216+dfsg-1
2.27~git20230308+dfsg-1
2.27~git20230406+dfsg-1
2.27.1+dfsg-1
2.28.0+dfsg-1
2.28.1+dfsg-1
2.28.2+dfsg-1
2.28.3+dfsg-1
2.28.3+dfsg-2
2.28.3+dfsg-3
2.28.3+dfsg-4
2.28.4+dfsg-1
2.28.5+dfsg-1
2.28.5+dfsg-2
2.28.5+dfsg-3
2.29~git20240103~7b4f1ef0+dfsg-1
2.29~git20240109~2afd04d0+dfsg-1
2.29~git20240109~2afd04d0+dfsg-2
2.29~git20240113~38d11e5c+dfsg-1
2.29.1+dfsg-1
2.29.2+dfsg-1
2.29.3+dfsg-1
2.30.0+dfsg-1
2.30.1+dfsg-1
2.30.1+dfsg-2
2.30.1+dfsg-3
2.30.1+dfsg-4
2.30.2+dfsg-1
2.30.3+dfsg-1
2.30.4+dfsg-1
2.30.5+dfsg-1
2.30.6+dfsg-1
2.30.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libsdl2

Package

Name
libsdl2
Purl
pkg:deb/debian/libsdl2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.26.0+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libsdl2

Package

Name
libsdl2
Purl
pkg:deb/debian/libsdl2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.26.0+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/libsdl-org/sdl

Affected ranges

Type
GIT
Repo
https://github.com/libsdl-org/sdl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

2.*

2.0.22-RC1
2.0.22-RC2
2.0.22-RC3

prerelease-2.*

prerelease-2.23.1
prerelease-2.23.2

release-2.*

release-2.0.0
release-2.0.1
release-2.0.10
release-2.0.12
release-2.0.14
release-2.0.16
release-2.0.18
release-2.0.2
release-2.0.20
release-2.0.22
release-2.0.3
release-2.0.4
release-2.0.5
release-2.0.6
release-2.0.7
release-2.0.8
release-2.0.9
release-2.24.0