USN-4131-1: VLC vulnerabilities
It was discovered that VLC incorrectly handled certain media files. If a user were tricked into opening a specially-crafted file, a remote attacker could use this issue to cause VLC to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/vlcto a version that resolves this vulnerability.Fixed in 3.0.8-0ubuntu19.04.1 - Upgrade
Upgrade
ubuntu/vlcto a version that resolves this vulnerability.Fixed in 3.0.8-0ubuntu18.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this VLC vulnerability?
The vulnerability ID for this VLC vulnerability is CVE-2019-13962, CVE-2019-14437, and CVE-2019-14438.
What is the severity of the VLC vulnerability?
The severity of the VLC vulnerability is not specified.
How can a remote attacker exploit this VLC vulnerability?
A remote attacker can exploit this VLC vulnerability by tricking a user into opening a specially-crafted media file, which can cause VLC to crash or execute arbitrary code.
Which versions of VLC are affected by this vulnerability?
VLC version 3.0.8-0ubuntu19.04.1 and 3.0.8-0ubuntu18.04.1 are affected by this vulnerability.
How can I fix the VLC vulnerability?
To fix the VLC vulnerability, update to version 3.0.8-0ubuntu19.04.1 if you are using Ubuntu 19.04, or update to version 3.0.8-0ubuntu18.04.1 if you are using Ubuntu 18.04.