ALT-PU-2022-7367-1
Package vlc updated to version 3.0.18-alt0.1.rv64 for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2022-12-06
BDU:2022-07176
Уязвимость модуля VNC медиаплеера VLC, позволяющая нарушителю выполнить произвольный код в целевой системе
Severity: HIGH (7.8)
Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2022-12-06
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2022-41325
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
- https://twitter.com/0xMitsurugi
- https://twitter.com/0xMitsurugi
- DSA-5297
- DSA-5297
- https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf
- https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf
- https://www.videolan.org/security/sb-vlc3018.html
- https://www.videolan.org/security/sb-vlc3018.html