An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0366-1 advisory.

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

  - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1     allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium     security severity: High) (CVE-2023-5217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM / 22.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory.

  - An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before     3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file.
    NOTE: this may be related to the SDL_Image product. (CVE-2019-19721)

  - A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in     VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service     (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.
    (CVE-2020-13428)

  - A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows     attackers to cause an out-of-bounds read via a crafted .avi file. (CVE-2021-25801)

  - A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11     allows attackers to cause an out-of-bounds read via a crafted .avi file. (CVE-2021-25802)

  - A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player     3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. (CVE-2021-25803)

  - A NULL-pointer dereference in Open in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service     (DOS) in the application. (CVE-2021-25804)

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10255-1 advisory.

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10252-1 advisory.

  - In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a     heap buffer overflow. This could lead to remote information disclosure with no additional execution     privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android     ID: A-156076070 (CVE-2020-0499)

  - In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to     a missing bounds check. This could lead to local information disclosure with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-11Android ID: A-174302683 (CVE-2021-0561)

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5297 advisory.

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3216 advisory.

  - An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by     tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or     execute code under some conditions. (CVE-2022-41325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
185537	openSUSE 15 Security Update : vlc (openSUSE-SU-2023:0366-1)	Nessus	SuSE Local Security Checks	critical
177459	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)	Nessus	Ubuntu Local Security Checks	high
169443	openSUSE 15 Security Update : vlc (openSUSE-SU-2022:10255-1)	Nessus	SuSE Local Security Checks	high
169346	openSUSE 15 Security Update : vlc (openSUSE-SU-2022:10252-1)	Nessus	SuSE Local Security Checks	high
168457	Debian DSA-5297-1 : vlc - security update	Nessus	Debian Local Security Checks	high
168386	Debian DLA-3216-1 : vlc - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-41325

high

Tenable Plugins

critical

high

high

high

high

high