A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to     trigger a heap-based buffer overflow via a crafted .mkv file. (CVE-2020-26664)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3050 advisory.

    Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of     arbitrary code or denial of service if a malformed media file is opened. For Debian 9 stretch, this     problem has been fixed in version 3.0.12-0+deb9u1. We recommend that you upgrade your vlc packages. For     the detailed security status of vlc please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/vlc Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for vlc fixes the following issues :

Update to version 3.0.13 :

  + Demux :

  - Adaptive: fix artefacts in HLS streams with wrong     profiles/levels

  - Fix regression on some MP4 files for the audio track

  - Fix MPGA and ADTS probing in TS files

  - Fix Flac inside AVI files

  - Fix VP9/Webm artefacts when seeking

  + Codec :

  - Support SSA text scaling

  - Fix rotation on Android rotation

  - Fix WebVTT subtitles that start at 00:00

  + Access :

  - Update libnfs to support NFSv4

  - Improve SMB2 integration

  - Fix Blu-ray files using Unicode names on Windows

  - Disable mcast lookups on Android for RTSP playback

  + Video Output: Rework the D3D11 rendering wait, to fix     choppiness on display

  + Interfaces :

  - Fix VLC getting stuck on close on X11 (#21875)

  - Improve RTL on preferences on macOS

  - Add mousewheel horizontal axis control

  - Fix crash on exit on macOS

  - Fix sizing of the fullscreen controls on macOS

  + Misc :

  - Improve MIDI fonts search on Linux

  - Update Soundcloud, Youtube, liveleak

  - Fix compilation with GCC11

  - Fix input-slave option for subtitles

  + Updated translations.

Update to version 3.0.12 :

  + Access: Add new RIST access module compliant with simple     profile (VSF_TR-06-1).

  + Access Output: Add new RIST access output module     compliant with simple profile (VSF_TR-06-1).

  + Demux: Fixed adaptive's handling of resolution settings.

  + Audio output: Fix audio distortion on macOS during start     of playback.

  + Video Output: Direct3D11: Fix some potential crashes     when using video filters.

  + Misc :

  - Several fixes in the web interface, including privacy     and security improvements

  - Update YouTube and Vocaroo scripts.

  + Updated translations.

The version of VLC media player installed on the remote host is prior to 3.0.12. It is, therefore, affected by a heap-based buffer overflow condition. A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202101-37 (VLC: Buffer overflow)

    VLC was found to have a buffer overflow when handling crafted MKV files.
  Impact :

    A remote attacker could entice a user to open a specially crafted MKV       file using VLC possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed media file is opened.

This update for vlc fixes the following issues :

Update to 3.0.11.1 :

  - CVE-2020-13428: Fixed heap-based buffer overflow in the     hxxx_AnnexB_to_xVC () (boo#1172727)

  - CVE-2020-26664: Fixed heap-based buffer overflow in     EbmlTypeDispatcher:send () (boo#1180755)

ID	Name	Product	Family	Severity
256082	Linux Distros Unpatched Vulnerability : CVE-2020-26664	Nessus	Misc.	high
162125	Debian DLA-3050-1 : vlc - LTS security update	Nessus	Debian Local Security Checks	high
149579	openSUSE Security Update : vlc (openSUSE-2021-691)	Nessus	SuSE Local Security Checks	high
146102	VLC < 3.0.12 Buffer Overflow	Nessus	Misc.	high
145566	GLSA-202101-37 : VLC: Buffer overflow	Nessus	Gentoo Local Security Checks	high
145397	Debian DSA-4834-1 : vlc - security update	Nessus	Debian Local Security Checks	high
145328	openSUSE Security Update : vlc (openSUSE-2021-91)	Nessus	SuSE Local Security Checks	high
145292	openSUSE Security Update : vlc (openSUSE-2021-76)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-26664

high

Tenable Plugins

high

high

high

high

high

high

high

high