Summary
It was discovered that VLC incorrectly handled certain media files.
A remote attacker could possibly use this issue to cause VLC to crash,
resulting in a denial of service, or potential arbitrary code execution.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | vlc | 2.2.2-5ubuntu0.16.04.5+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | vlc | 3.0.8-0ubuntu18.04.1+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | vlc | 3.0.9.2-1ubuntu0.1~esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | vlc | 3.0.16-1ubuntu0.1~esm2 |
Vulnerabilities 2
-
High 7.5
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
-
Unscored —
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in fu…