CVE-2017-8313

2017-05-2300:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

49.4%

JSON

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to
missing check of string termination allows attackers to read data beyond
allocated memory and potentially crash the process via a crafted subtitles
file.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchvlc< 2.1.6-0ubuntu14.04.3UNKNOWN
ubuntu16.04noarchvlc< 2.2.2-5ubuntu0.16.04.3UNKNOWN
ubuntu17.04noarchvlc< 2.2.4-14ubuntu2.1UNKNOWN