Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2021-0227 Moderate: VLC Critical Remote Code Execution

mageia
Calendar Grey June 8, 2021
Dist Mageia Esm H88
A recent Mageia upgrade for VLC addresses serious security issues, including potential remote code executions and buffer overflow flaws.
A remote user could create a specifically crafted file that could trigger some various issues

Summary

A remote user could create a specifically crafted file that could trigger some various issues. It is possible to trigger a remote code execution through a specifically crafted playlist, and tricking the user into interacting with that playlist elements. It is also possible to trigger read or write buffer overflows with some crafted files or by a MITM attack on the automatic updater

References

- https://bugs.mageia.org/show_bug.cgi?id=28930

- https://www.videolan.org/security/sb-vlc3013.html

- https://www.videolan.org/vlc/releases/3.0.13.html

- https://code.videolan.org/videolan/vlc-3.0/-/raw/master/NEWS

- ;a=blob;f=NEWS;h=e5dd1855e797179ec3a0bee2cae4ac68705a70cc;hb=41878ff4f2a4b566cf0a1bd15f72037b2be98a18

Topics%20covered

Topics Covered

security advisory buffer overflow software update remote code execution Mageia

Resolution

SRPMS

- 8/tainted/vlc-3.0.14-1.mga8.tainted

- 8/core/vlc-3.0.14-1.mga8

- 7/tainted/vlc-3.0.14-1.mga7.tainted

- 7/core/vlc-3.0.14-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 08 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0227.html
Type: security

Topics%20covered

Topics Covered

security advisory buffer overflow software update remote code execution Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here