DSA-4504: -1 vlc -- security update
Published Aug 20, 2019
·Updated
Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed.
Affected Software
2 affected components
debian/vlc
debian/vlc
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch DSA-4504-1
Event History
Aug 20, 2019
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What must an attacker do to trigger these issues?
An attacker would need to cause VLC to process a malformed media file or stream.
2
What impact could successful exploitation have?
The issues could allow arbitrary code execution or cause a denial of service.