vulnerability

SUSE: CVE-2022-41325: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Dec 6, 2022
Added
Dec 28, 2022
Modified
Jan 28, 2025

Description

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

Solutions

suse-upgrade-libvlc5suse-upgrade-libvlccore9suse-upgrade-vlcsuse-upgrade-vlc-codec-gstreamersuse-upgrade-vlc-develsuse-upgrade-vlc-jacksuse-upgrade-vlc-langsuse-upgrade-vlc-noxsuse-upgrade-vlc-opencvsuse-upgrade-vlc-qtsuse-upgrade-vlc-vdpau
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.