PublicDateAtUSN: 2019-08-29
Candidate: CVE-2019-14534
PublicDate: 2019-08-29 19:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
 https://www.videolan.org/security/sb-vlc308.html
 https://ubuntu.com/security/notices/USN-4131-1
Description:
 In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference
 at the function SeekPercent of demux/asf/asf.c that will lead to a denial
 of service attack.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by: Antonio Morales from the Semmle Security Team
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM]


Patches_vlc:
upstream_vlc: released (3.0.8-1)
precise/esm_vlc: DNE
trusty_vlc: ignored (out of standard support)
trusty/esm_vlc: DNE
xenial_vlc: ignored (end of standard support, was needed)
bionic_vlc: released (3.0.8-0ubuntu18.04.1)
disco_vlc: released (3.0.8-0ubuntu19.04.1)
eoan_vlc: not-affected (3.0.8-2)
focal_vlc: not-affected (3.0.8-2)
groovy_vlc: not-affected (3.0.8-2)
hirsute_vlc: not-affected (3.0.8-2)
impish_vlc: not-affected (3.0.8-2)
jammy_vlc: not-affected (3.0.8-2)
devel_vlc: not-affected (3.0.8-2)