CVE search results

11 – 20 of 153 results

Detailed view

Sort by:

CVE-2020-6079

Medium priority

Some fixes available 2 of 9

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to...

2 affected packages

vlc, libmicrodns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
vlc	Not affected	Not affected	Not affected	Fixed
libmicrodns	Not in release	Not in release	Not in release	Fixed

CVE-2020-6078

Medium priority

Some fixes available 2 of 9

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdns_recv, the return value of the mdns_read_header function is not checked,...

2 affected packages

libmicrodns, vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libmicrodns	Not in release	Not in release	Not in release	Fixed
vlc	Not affected	Not affected	Not affected	Fixed

CVE-2020-6077

Medium priority

Some fixes available 1 of 8

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the...

2 affected packages

libmicrodns, vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libmicrodns	Not in release	Not in release	Not in release	Fixed
vlc	Not affected	Not affected	Not affected	Not affected

CVE-2020-6073

Medium priority

Some fixes available 2 of 9

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be...

2 affected packages

libmicrodns, vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libmicrodns	Not in release	Not in release	Not in release	Fixed
vlc	Not affected	Not affected	Not affected	Fixed

CVE-2020-6072

Medium priority

Some fixes available 2 of 9

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rr_decode function’s return value is not checked, leading...

2 affected packages

libmicrodns, vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libmicrodns	Not in release	Not in release	Not in release	Fixed
vlc	Not affected	Not affected	Not affected	Fixed

CVE-2020-6071

Medium priority

Some fixes available 2 of 9

An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without...

2 affected packages

libmicrodns, vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libmicrodns	Not in release	Not in release	Not in release	Fixed
vlc	Not affected	Not affected	Not affected	Fixed

CVE-2020-26664

Medium priority

Needs evaluation

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

1 affected package

vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
vlc	Not affected	Not affected	Needs evaluation	Needs evaluation

CVE-2020-13428

Medium priority

Some fixes available 2 of 3

A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or...

1 affected package

vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
vlc	Not affected	Not affected	Fixed	Fixed

CVE-2019-5460

Medium priority

Not affected

Double Free in VLC versions <= 3.0.6 leads to a crash.

1 affected package

vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
vlc	—	—	—	Not affected

CVE-2019-5459

Medium priority

Needs evaluation

An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.

2 affected packages

faad2, vlc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
faad2	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
vlc	Not affected	Not affected	Not affected	Not affected

Export to JSON

Results by page:

Search CVE reports