Linux · 
Ubuntu · Package update · August 28, 2019
Ubuntu · Package update · August 28, 2019vlc-plugin-visualization 3.0.8-0ubuntu18.04.1: vlc-plugin-visualization 3.0.8-0ubuntu18.04.1 for Ubuntu 18.04.6 LTS (bionic)
vlc-plugin-visualization 3.0.8-0ubuntu18.04.1, released August 28, 2019, fixes 11 CVEs in vlc-plugin-visualization. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
11
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0367
89th percentile
Priority of the 11 CVEs
Patch now 0
Urgent 0
High 0
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| vlc-plugin-visualization | Ubuntu 18.04.6 LTS (bionic) | 3.0.8-0ubuntu18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Routine | CVE-2019-13962 | vlc-data: lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer... | n/a | 0.0367 | None reported |
| Routine | CVE-2019-14970 | vlc-l10n: A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap... | n/a | 0.0194 | None reported |
| Routine | CVE-2019-14438 | libvlc5: A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allo... | n/a | 0.0182 | None reported |
| Routine | CVE-2019-14535 | libvlc5: A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 | n/a | 0.0154 | None reported |
| Routine | CVE-2019-14776 | libvlc5: A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a cra... | n/a | 0.0154 | None reported |
| Routine | CVE-2019-14498 | libvlc5: A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1 | n/a | 0.0152 | None reported |
| Routine | CVE-2019-14437 | libvlc5: The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array boun... | n/a | 0.0150 | None reported |
| Routine | CVE-2019-14533 | vlc-plugin-video-splitter: The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | n/a | 0.0146 | None reported |
| Routine | CVE-2019-14777 | vlc: The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | n/a | 0.0146 | None reported |
| Routine | CVE-2019-14778 | vlc-plugin-video-output: The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a u... | n/a | 0.0146 | None reported |
| Routine | CVE-2019-14534 | libvlc5: In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/as... | n/a | 0.0140 | None reported |
Showing 1 to 11 of 11
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.