Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-41325

Опубликовано: 06 дек. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.8

Описание

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

3.0.18-2build1
esm-apps/bionic

released

3.0.8-0ubuntu18.04.1+esm1
esm-apps/focal

released

3.0.9.2-1ubuntu0.1~esm1
esm-apps/jammy

released

3.0.16-1ubuntu0.1~esm1
esm-apps/noble

not-affected

3.0.18-2build1
esm-apps/xenial

released

2.2.2-5ubuntu0.16.04.5+esm2
esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needed
jammy

needed

Показывать по

EPSS

Процентиль: 20%
0.00064
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

CVSS3: 7.8
debian
больше 2 лет назад

An integer overflow in the VNC module in VideoLAN VLC Media Player thr ...

suse-cvrf
больше 2 лет назад

Security update for vlc

CVSS3: 4.7
redos
больше 2 лет назад

Уязвимость VLC

CVSS3: 7.8
github
больше 2 лет назад

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

EPSS

Процентиль: 20%
0.00064
Низкий

7.8 High

CVSS3