A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory.

    It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were     tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to     crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2019-19721)

    It was discovered that VLC could be made to write out of bounds when processing H.264 video files. If a     user were tricked into opening a crafted H.264 video file, a remote attacker could possibly use this issue     to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only     affected Ubuntu 18.04 LTS and

    Ubuntu 20.04 LTS. (CVE-2020-13428)

    It was discovered that VLC could be made to read out of bounds when processing AVI video files. If a user     were tricked into opening a crafted AVI video file, a remote attacker could possibly use this issue to     cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu     18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-25801, CVE-2021-25802, CVE-2021-25803, CVE-2021-25804)

    It was discovered that the VNC module of VLC contained an arithmetic overflow. If a user were tricked into     opening a crafted playlist or connecting to a rouge VNC server, a remote attacker could possibly use this     issue to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code.
    (CVE-2022-41325)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2728 advisory.

  - A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows     attackers to cause an out-of-bounds read via a crafted .avi file. (CVE-2021-25801)

  - A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11     allows attackers to cause an out-of-bounds read via a crafted .avi file. (CVE-2021-25802)

  - A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player     3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. (CVE-2021-25803)

  - A NULL-pointer dereference in Open in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service     (DOS) in the application. (CVE-2021-25804)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
177459	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)	Nessus	Ubuntu Local Security Checks	high
152193	Debian DLA-2728-1 : vlc - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2021-25803

high

Tenable Plugins

high

high