CVE-2023-47360: Integer Underflow
Published Nov 7, 2023
·Updated
Last updated 24 July 2024
Other sources
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
Affected Software
2 affected componentsFixes available
debian/vlc
3.0.21-0+deb11u13.0.21-0+deb12u13.0.21-2
Videolan VLC Media Player<3.0.20
Remediation
Event History
Nov 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
May 23, 2024
Data Sourced
via Launchpad·09:25 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·09:42 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2023-47360?
CVE-2023-47360 is a vulnerability in Videolan VLC media player prior to version 3.0.20 that contains an integer underflow leading to an incorrect packet length.
2
What is the severity of CVE-2023-47360?
The severity of CVE-2023-47360 is high with a CVSS score of 7.5.
3
How does CVE-2023-47360 affect Videolan VLC media player?
CVE-2023-47360 affects Videolan VLC media player versions prior to 3.0.20.
4
How can I fix CVE-2023-47360?
To fix CVE-2023-47360, it is recommended to update Videolan VLC media player to version 3.0.20 or later.
5
Where can I find more information about CVE-2023-47360?
You can find more information about CVE-2023-47360 at the following link: <a href='https://0xariana.github.io/blog/real_bugs/vlc/mms'>https://0xariana.github.io/blog/real_bugs/vlc/mms</a>