Lucene search
Veracode Vulnerability DatabaseVERACODE:27112HistorySep 21, 2020 - 6:36 a.m.
Information Disclosure
2020-09-2106:36:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
vlc media player
caf demuxer
information disclosure
memory leak
denial of service
infoleak
security vulnerability
bionic
EPSS
0.529
Percentile
97.6%
vlc:bionic is vulnerable to information disclosure. The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
Related
osv
osv
CVE-2018-19857
2018-12-05 11:29:05
vlc - security update
2019-01-12 00:00:00
libvlc5-3.0.16-1.5 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2018-19857
2018-12-05 11:29:05
openvas
openvas
Debian: Security Advisory (DSA-4366-1)
2019-01-11 00:00:00
VLC Media Player CAF Demuxer Integer Underflow Vulnerability - Windows
2018-12-17 00:00:00
VLC Media Player CAF Demuxer Integer Underflow Vulnerability - Mac OS X
2018-12-17 00:00:00
nessus
nessus
Debian DSA-4366-1 : vlc - security update
2019-01-14 00:00:00
VLC < 3.0.5 Denial of Service and/or Infoleak Vulnerability
2020-05-27 00:00:00
Ubuntu 18.04 LTS : VLC vulnerabilities (USN-4074-1)
2019-07-26 00:00:00
cvelist
cvelist
CVE-2018-19857
2018-12-05 11:00:00
prion
prion
Design/Logic Flaw
2018-12-05 11:29:00
debiancve
debiancve
CVE-2018-19857
2018-12-05 11:29:05
debian
debian
[SECURITY] [DSA 4366-1] vlc security update
2019-01-12 12:35:54
checkpoint_advisories
checkpoint_advisories
VideoLAN VLC Media Player Denial of Service (CVE-2018-19857)
2020-08-05 00:00:00
nvd
nvd
CVE-2018-19857
2018-12-05 11:29:05
ubuntucve
ubuntucve
CVE-2018-19857
2018-12-05 00:00:00
ubuntu
ubuntu
VLC vulnerabilities
2019-07-25 00:00:00
suse
suse
Security update for vlc (important)
2019-08-15 00:00:00
Security update for vlc (important)
2019-08-26 00:00:00
Security update for vlc (important)
2019-08-08 00:00:00