The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vlc | Aug 22, 2024 | Dec 6, 2022 |
| Debian | — | Upgrade vlc | Dec 5, 2022 | Dec 5, 2022 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Sep 23, 2024 | Dec 6, 2022 |
| Suse | — | Upgrade vlc-vdpauUpgrade libvlccore9Upgrade vlc-jackUpgrade vlc-noxUpgrade vlc-opencvUpgrade vlc-develUpgrade vlc-qtUpgrade vlcUpgrade vlc-langUpgrade libvlc5Upgrade vlc-codec-gstreamer | Dec 28, 2022 | Dec 6, 2022 |
| Ubuntu | — | Upgrade vlc-plugin-access-extra (Ubuntu Pro)Upgrade vlcUpgrade vlc-plugin-access-extraUpgrade vlc (Ubuntu Pro) | Jun 21, 2023 | Dec 6, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub