CVE-2020-14409
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy...
CVE-2020-14409 is a high vulnerability (CVSS 7.8) in Libsdl Simple Directmedia Layer, published January 19, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 70th percentile. Fixed in libsdl2 2.0.14+dfsg2-2.
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
CVE-2020-14409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-190, CWE-787
- Updated
- 2026-11-02
CVE List No score
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
CVE-2020-14409- Updated
- 2026-11-02
EUVDEUVD-2020-6548 No score
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
EUVD-2020-6548- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3656-jvhv-q239
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy...
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
GHSA-3656-jvhv-q239- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190, CWE-787
- Updated
- 2026-11-02
OSVBELL-CVE-2020-14409
CVE-2020-14409 does not affect BellSoft software
- Record
BELL-CVE-2020-14409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
CVE-2020-14409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 15 moreShow less
OSVDEBIAN-CVE-2020-14409
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
DEBIAN-CVE-2020-14409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-362
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
JLSEC-2026-362- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSVOESA-2022-1645
SDL2 security update
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.
Security Fix(es):
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.(CVE-2020-14409) SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.(CVE-2020-14410)
- Record
OESA-2022-1645- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-14409
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- Record
UBUNTU-CVE-2020-14409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0201 No score
Updated sdl2 packages fix security vulnerabilities
This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files (CVE-2020-14409, CVE-2020-14410).
- Record
MGASA-2021-0201- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0104-1 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
- Record
openSUSE-SU-2022:0104-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13582-1 No score
SDL2-devel-2.28.5-2.1 on GA media
These are all security issues fixed in the SDL2-devel-2.28.5-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13582-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15206-1 No score
SDL2-2.32.8-1.1 on GA media
These are all security issues fixed in the SDL2-2.32.8-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15206-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0104-1 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
- Record
SUSE-SU-2022:0104-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0104-2 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
- Record
SUSE-SU-2022:0104-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:0825-1 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409, CVE-2020-14410: Fixed overflow in surface pitch calculation (bsc#1181201, bsc#1181202).
- Record
SUSE-SU-2022:0825-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1273-1 No score
Security update for SDL
This update for SDL fixes the following issues:
- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
- Record
SUSE-SU-2022:1273-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1312-1 No score
Security update for SDL
This update for SDL fixes the following issues:
- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
- Record
SUSE-SU-2022:1312-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14943-1 No score
Security update for SDL
This update for SDL fixes the following issues:
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c (bsc#1181201).
- CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c (bsc#1124825).
- CVE-2021-33657: Fix a buffer overflow when parsing a crafted BMP image (bsc#1198001).
- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c (bsc#1181202).
- Record
SUSE-SU-2022:14943-1- Updated
- 2026-11-02
OSVUSN-5274-1 No score
libsdl2 vulnerabilities
It was discovered that Simple DirectMedia Layer library incorrectly handled memory when parsing certain specially crafted .BMP files. An attacker could possibly use these issues to crash the application or execute arbitrary code.
- Record
USN-5274-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libsdl2Debian:12 |
before 2.0.14+dfsg2-2 | 2.0.14+dfsg2-2 |
libsdl2Debian:13 |
before 2.0.14+dfsg2-2 | 2.0.14+dfsg2-2 |
libsdl2Debian:14 |
before 2.0.14+dfsg2-2 | 2.0.14+dfsg2-2 |
libsdl2Debian:9 |
before 2.0.5+dfsg1-2+deb9u1, plus listed versions 2.0.5+dfsg1-2 |
2.0.5+dfsg1-2+deb9u1 |
libsdl2Debian:10 |
before 2.0.9+dfsg1-1+deb10u1, plus listed versions 2.0.9+dfsg1-1 |
2.0.9+dfsg1-1+deb10u1 |
SDL2_jllJulia |
2.0.12+0 up to 2.24.2+0 | 2.24.2+0 |
sdl2Mageia:7 |
before 2.0.10-1.1.mga7 | 2.0.10-1.1.mga7 |
mingw-SDL2Mageia:7 |
before 2.0.10-1.1.mga7 | 2.0.10-1.1.mga7 |
SDL2openEuler:20.03-LTS-SP1 |
before 2.0.12-1.oe1 | 2.0.12-1.oe1 |
SDL2openEuler:20.03-LTS-SP3 |
before 2.0.12-1.oe1 | 2.0.12-1.oe1 |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
SDL2openEuler:22.03-LTS |
before 2.0.12-4.oe2203 | 2.0.12-4.oe2203 |
SDL2SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Module for Package Hub 15 SP3 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Manager Proxy 4.1 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Manager Retail Branch Server 4.1 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Manager Server 4.1 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Enterprise Storage 7 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Real Time 15 SP2 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server 15-LTSS |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server for SAP Applications 15 |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Enterprise Storage 6 |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDLSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Module for Package Hub 15 SP3 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Real Time 15 SP2 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15-LTSS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP1-BCL |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP2-BCL |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Manager Proxy 4.1 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Manager Retail Branch Server 4.1 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Manager Server 4.1 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Enterprise Storage 6 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Enterprise Storage 7 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLopenSUSE:Leap 15.3 |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:HPE Helion OpenStack 8 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud 8 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud 9 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud Crowbar 8 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud Crowbar 9 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP2-BCL |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP3-BCL |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP5 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 1.2.13-106.21.1 | 1.2.13-106.21.1 |
SDLSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 1.2.13-106.21.1 | 1.2.13-106.21.1 |
libsdl2Ubuntu:Pro:18.04:LTS |
before 2.0.8+dfsg1-1ubuntu1.18.04.4+esm1, plus listed versions 2.0.6+dfsg1-3ubuntu12.0.6+dfsg1-4ubuntu12.0.7+dfsg1-3ubuntu12.0.8+dfsg1-1ubuntu12.0.8+dfsg1-1ubuntu1.18.04.12.0.8+dfsg1-1ubuntu1.18.04.32.0.8+dfsg1-1ubuntu1.18.04.4 |
2.0.8+dfsg1-1ubuntu1.18.04.4+esm1 |
libsdl2Ubuntu:Pro:20.04:LTS |
before 2.0.10+dfsg1-3ubuntu0.1~esm1, plus listed versions 2.0.10+dfsg1-1ubuntu12.0.10+dfsg1-1ubuntu42.0.10+dfsg1-1ubuntu62.0.10+dfsg1-1ubuntu72.0.10+dfsg1-1ubuntu82.0.10+dfsg1-2ubuntu52.0.10+dfsg1-3 |
2.0.10+dfsg1-3ubuntu0.1~esm1 |
pdnsSUSE:Package Hub 15 SP3 |
before 4.3.1-bp153.2.3.1 | 4.3.1-bp153.2.3.1 |
pdnsopenSUSE:Leap 15.3 |
before 4.3.1-bp153.2.3.1 | 4.3.1-bp153.2.3.1 |
SDL2openSUSE:Leap 15.3 |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2openSUSE:Tumbleweed |
before 2.28.5-2.1 | 2.28.5-2.1 |
SDL2openSUSE:Tumbleweed |
before 2.32.8-1.1 | 2.32.8-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.libsdl.org/show_bug.cgi?id=5200
hg.libsdl.org/SDL/rev/3f9b4e92c1d9
lists.debian.org/debian-lts-announce/2021/01/msg00024.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQWQEAWJNR
security.gentoo.org/glsa/202107-55
starwindsoftware.com/security/sw-20210325-0001
Show 44 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-14409
github.com/advisories/GHSA-3656-jvhv-q239
docs.bell-sw.com/security/cves/CVE-2020-14409
security-tracker.debian.org/tracker/CVE-2020-14409
advisories.mageia.org/MGASA-2021-0201.html
bugs.mageia.org/show_bug.cgi?id=28275
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1645
suse.com/support/update/announcement/2022/suse-su-20220104-1
bugzilla.suse.com/1181201
ubuntu.com/security/CVE-2020-14409
cve.org/CVERecord?id=CVE-2020-14409
lists.opensuse.org/archives/list/[email protected]/thread/GCAJV7QU7NXYUTY7OMBOV6LAES2X326R