Description
Double Free in VLC versions <= 3.0.6 leads to a crash.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- openSUSE / backportssle-15 – sle-15
- openSUSE / backportssle-15 – sle-15
- openSUSE / Leap15.0 – 15.0
- openSUSE / Leap15.1 – 15.1
- VideoLAN / VLC media player3.0.6
References
- MISChttps://hackerone.com/reports/503208
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
Updated 29m ago · 8 sources