A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory.

    It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were     tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to     crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2019-19721)

    It was discovered that VLC could be made to write out of bounds when processing H.264 video files. If a     user were tricked into opening a crafted H.264 video file, a remote attacker could possibly use this issue     to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only     affected Ubuntu 18.04 LTS and

    Ubuntu 20.04 LTS. (CVE-2020-13428)

    It was discovered that VLC could be made to read out of bounds when processing AVI video files. If a user     were tricked into opening a crafted AVI video file, a remote attacker could possibly use this issue to     cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu     18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-25801, CVE-2021-25802, CVE-2021-25803, CVE-2021-25804)

    It was discovered that the VNC module of VLC contained an arithmetic overflow. If a user were tricked into     opening a crafted playlist or connecting to a rouge VNC server, a remote attacker could possibly use this     issue to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code.
    (CVE-2022-41325)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for vlc fixes the following issues :

Update to 3.0.11.1 :

  - CVE-2020-13428: Fixed heap-based buffer overflow in the     hxxx_AnnexB_to_xVC () (boo#1172727)

  - CVE-2020-26664: Fixed heap-based buffer overflow in     EbmlTypeDispatcher:send () (boo#1180755)

Thomas Guillem reports :

A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.

A vulnerability was discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed video file is opened.

ID	Name	Product	Family	Severity
177459	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)	Nessus	Ubuntu Local Security Checks	high
145328	openSUSE Security Update : vlc (openSUSE-2021-91)	Nessus	SuSE Local Security Checks	high
145292	openSUSE Security Update : vlc (openSUSE-2021-76)	Nessus	SuSE Local Security Checks	high
137691	FreeBSD : vlc heap-based buffer overflow (77896891-b08a-11ea-937b-b42e99a1b9c3)	Nessus	FreeBSD Local Security Checks	high
137573	Debian DSA-4704-1 : vlc - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-13428

high

Tenable Plugins

high

high

high

high

high