An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. (CVE-2019-5459)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for vlc to version 3.0.7.1 fixes the following issues :

Security issues fixed :

  - CVE-2019-5439: Fixed a buffer overflow (bsc#1138354).

  - CVE-2019-5459: Fixed an integer underflow (bsc#1143549).

  - CVE-2019-5460: Fixed a double free (bsc#1143547).

  - CVE-2019-12874: Fixed a double free in     zlib_decompress_extra in modules/demux/mkv/util.cpp     (bsc#1138933).

  - CVE-2019-13602: Fixed an integer underflow in mp4     demuxer (boo#1141522).

  - CVE-2019-13962: Fixed a heap-based buffer over-read in     avcodec (boo#1142161).

Non-security issues fixed :

  - Video Output :

  - Fix hardware acceleration with some AMD drivers

  - Improve direct3d11 HDR support

  - Access :

  - Improve Blu-ray support

  - Audio output :

  - Fix pass-through on Android-23

  - Fix DirectSound drain

  - Demux: Improve MP4 support

  - Video Output :

  - Fix 12 bits sources playback with Direct3D11

  - Fix crash on iOS

  - Fix midstream aspect-ratio changes when Windows hardware     decoding is on

  - Fix HLG display with Direct3D11

  - Stream Output: Improve Chromecast support with new     ChromeCast apps

  - Misc :

  - Update Youtube, Dailymotion, Vimeo, Soundcloud scripts

  - Work around busy looping when playing an invalid item     with loop enabled

  - Updated translations.

New package libaom :

  - Initial version 1.0.0

  - A library for AOMedia Video 1 (AV1), an open,     royalty-free video coding format designed for video     transmissions over the Internet.

This update for vlc to version 3.0.7.1 fixes the following issues :

Security issues fixed :

&#9; - CVE-2019-5439: Fixed a buffer overflow (bsc#1138354).

  - CVE-2019-5459: Fixed an integer underflow (bsc#1143549).

  - CVE-2019-5460: Fixed a double free (bsc#1143547).

  - CVE-2019-12874: Fixed a double free in     zlib_decompress_extra in modules/demux/mkv/util.cpp     (bsc#1138933).

  - CVE-2019-13602: Fixed an integer underflow in mp4     demuxer (boo#1141522).

  - CVE-2019-13962: Fixed a heap-based buffer over-read in     avcodec (boo#1142161).

Non-security issues fixed :

  - Video Output :

  - Fix hardware acceleration with some AMD drivers

  - Improve direct3d11 HDR support

  - Access :

  - Improve Blu-ray support

  - Audio output :

  - Fix pass-through on Android-23

  - Fix DirectSound drain

  - Demux: Improve MP4 support

  - Video Output :

  - Fix 12 bits sources playback with Direct3D11

  - Fix crash on iOS

  - Fix midstream aspect-ratio changes when Windows hardware     decoding is on

  - Fix HLG display with Direct3D11

  - Stream Output: Improve Chromecast support with new     ChromeCast apps

  - Misc :

  - Update Youtube, Dailymotion, Vimeo, Soundcloud scripts

  - Work around busy looping when playing an invalid item     with loop enabled

  - Updated translations.

The version of VLC media player installed on the remote host is earlier than 3.0.7.  It is, therefore, affected by multiple vulnerabilities:

  - A heap-based buffer overflow condition exists in ReadFrame     due to improper parsing of AVI files. A remote attacker can     exploit this by tricking a user into opening a specially     crafted avi file to cause a denial of service condition     or the execution of arbitrary code.(CVE-2019-5439)

  - A double free vulnerability exists in zlib_decompress_extra     due to improper parsing of MKV files. A remote attacker can     exploit this by tricking a user into opening a specially     crafted MKV file to cause a denial of service condition     or the execution of arbitrary code.(CVE-2019-12874)

  - An Integer underflow in VLC Media Player versions < 3.0.7     leads to an out-of-band read..(CVE-2019-5459)

  - A double free vulnerability exists which lead to VLC application to crash.
    (CVE-2019-5460)

ID	Name	Product	Family	Type	Severity
254620	Linux Distros Unpatched Vulnerability : CVE-2019-5459	Nessus	Misc.	Local	high
128001	openSUSE Security Update : vlc (openSUSE-2019-1909)	Nessus	SuSE Local Security Checks	Local	critical
127743	openSUSE Security Update : vlc (openSUSE-2019-1840)	Nessus	SuSE Local Security Checks	Local	critical
126246	VLC < 3.0.7 Multiple Vulnerabilities	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2019-5459

high

Tenable Plugins

high

critical

critical

critical