An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

The remote host is affected by the vulnerability described in GLSA-202409-17 (VLC: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of VLC media player installed on the remote host is prior to 3.0.18. It is, therefore, affected by multiple vulnerabilities:
  - VideoLAN VLC prior to version 3.0.18 contains a potential buffer overflow that allows attackers, by tricking   a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some   conditions. (CVE-2022-41325)   
  - VideoLAN VLC prior to version 3.0.18 contains a denial of service that could be triggered with a wrong mp4 file   
  - VideoLAN VLC prior to version 3.0.18 contains a denial of service that could be triggered with a wrong oog file

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0366-1 advisory.

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

  - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1     allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium     security severity: High) (CVE-2023-5217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory.

    It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were     tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to     crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2019-19721)

    It was discovered that VLC could be made to write out of bounds when processing H.264 video files. If a     user were tricked into opening a crafted H.264 video file, a remote attacker could possibly use this issue     to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only     affected Ubuntu 18.04 LTS and

    Ubuntu 20.04 LTS. (CVE-2020-13428)

    It was discovered that VLC could be made to read out of bounds when processing AVI video files. If a user     were tricked into opening a crafted AVI video file, a remote attacker could possibly use this issue to     cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu     18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-25801, CVE-2021-25802, CVE-2021-25803, CVE-2021-25804)

    It was discovered that the VNC module of VLC contained an arithmetic overflow. If a user were tricked into     opening a crafted playlist or connecting to a rouge VNC server, a remote attacker could possibly use this     issue to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code.
    (CVE-2022-41325)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10255-1 advisory.

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10252-1 advisory.

  - In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a     heap buffer overflow. This could lead to remote information disclosure with no additional execution     privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android     ID: A-156076070 (CVE-2020-0499)

  - In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to     a missing bounds check. This could lead to local information disclosure with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-11Android ID: A-174302683 (CVE-2021-0561)

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5297 advisory.

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3216 advisory.

    - -----------------------------------------------------------------------     Debian LTS Advisory DLA-3216-1              debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Utkarsh Gupta     December 03, 2022                           https://wiki.debian.org/LTS
    - -----------------------------------------------------------------------

    Package        : vlc     Version        : 3.0.17.4-0+deb10u2     CVE ID         : CVE-2022-41325

    Mitsurugi Heishiro found out that in VLC, multimedia player and streamer,     a potential buffer overflow in the vnc module could trigger remote code     execution if a malicious vnc URL is deliberately played.

    For Debian 10 buster, this problem has been fixed in version     3.0.17.4-0+deb10u2.

    We recommend that you upgrade your vlc packages.

    For the detailed security status of vlc please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/vlc

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207579	GLSA-202409-17 : VLC: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
206449	VLC < 3.0.18 Multiple Vulnerabilities	Nessus	Misc.	high
185537	openSUSE 15 Security Update : vlc (openSUSE-SU-2023:0366-1)	Nessus	SuSE Local Security Checks	critical
177459	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)	Nessus	Ubuntu Local Security Checks	high
169443	openSUSE 15 Security Update : vlc (openSUSE-SU-2022:10255-1)	Nessus	SuSE Local Security Checks	high
169346	openSUSE 15 Security Update : vlc (openSUSE-SU-2022:10252-1)	Nessus	SuSE Local Security Checks	high
168457	Debian DSA-5297-1 : vlc - security update	Nessus	Debian Local Security Checks	high
168386	Debian dla-3216 : libvlc-bin - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-41325

high

Tenable Plugins

high

high

critical

high

high

high

high

high