Kritik CVSS 9.1 PoC var
CVE-2018-19857: Vlc Media Player: güvenlik açığı
Açıklama (NVD)
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
Özet bilgiler
- Ürün
- Videolan Vlc Media Player
- CVSS v3.1
- 9.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - EPSS
- %3,92 (yüzdelik 90)
- CWE
- CWE-824
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| videolan-vlc-media-player | 3.0.4 | 3.0.4 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- www.securityfocus.com
- dyntopia.com
- git.videolan.org
- usn.ubuntu.com
- www.debian.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- www.securityfocus.com
- dyntopia.com
- git.videolan.org
- usn.ubuntu.com
- www.debian.org
- CWE-824