Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-47360
HistoryNov 07, 2023 - 12:00 a.m.

CVE-2023-47360

2023-11-0700:00:00
ubuntu.com
ubuntu.com
17
videolan vlc
integer underflow
security vulnerability
packet length
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

17.1%

Videolan VLC prior to version 3.0.20 contains an Integer underflow that
leads to an incorrect packet length.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchvlc< 3.0.8-0ubuntu18.04.1+esm2UNKNOWN
ubuntu20.04noarchvlc< 3.0.9.2-1ubuntu0.1~esm2UNKNOWN
ubuntu22.04noarchvlc< 3.0.16-1ubuntu0.1~esm2UNKNOWN
ubuntu23.10noarchvlc< 3.0.18-4ubuntu0.1UNKNOWN
ubuntu16.04noarchvlc< 2.2.2-5ubuntu0.16.04.5+esm3UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

17.1%