MEDIUM
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack
Published Aug 29, 2019
5.5
MEDIUMCVSS 3.0
EPSS 1.39%
Description
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
Affected products
No data.
Configuration 1
- 3.0.7.1
Configuration 2
OR
- 9.0
- 10.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (8)
- http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 x_refsource_CONFIRMPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html vendor-advisoryx_refsource_SUSE
- https://seclists.org/bugtraq/2019/Aug/36 mailing-listx_refsource_BUGTRAQMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201909-02 vendor-advisoryx_refsource_GENTOO
- https://usn.ubuntu.com/4131-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.debian.org/security/2019/dsa-4504 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- https://www.videolan.org/security/sb-vlc308.html x_refsource_CONFIRMPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 | x_refsource_CONFIRMPatchThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html | vendor-advisoryx_refsource_SUSE | |
| https://seclists.org/bugtraq/2019/Aug/36 | mailing-listx_refsource_BUGTRAQMailing ListThird Party Advisory | |
| https://security.gentoo.org/glsa/201909-02 | vendor-advisoryx_refsource_GENTOO | |
| https://usn.ubuntu.com/4131-1/ | vendor-advisoryx_refsource_UBUNTU | |
| https://www.debian.org/security/2019/dsa-4504 | vendor-advisoryx_refsource_DEBIANThird Party Advisory | |
| https://www.videolan.org/security/sb-vlc308.html | x_refsource_CONFIRMPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 29, 2019
Updated Aug 5, 2024
Reserved Aug 2, 2019
Link CVE-2019-14534
CISA Vulnrichment
Updated n/a