VideoLAN VLC 'input/demux_chained.c' Denial of Service Vulnerability

Bugtraq ID:	104293
Class:	Design Error
CVE:	CVE-2018-11516
Remote:	Yes
Local:	No
Published:	May 28 2018 12:00AM
Updated:	May 28 2018 12:00AM
Credit:	Cody Sixteen
Vulnerable:	VideoLAN VLC media player 3.0.1
Not Vulnerable:

VideoLAN VLC 'input/demux_chained.c' Denial of Service Vulnerability

VideoLAN VLC is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to cause a denial-of-service condition.

VideoLAN VLC version 3.0.1 is vulnerable; other versions may also be affected.

VideoLAN VLC 'input/demux_chained.c' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VideoLAN VLC 'input/demux_chained.c' Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

VideoLAN VLC 'input/demux_chained.c' Denial of Service Vulnerability

References:

• Make free the VLC (code610)
  
• VLC Homepage (VideoLAN)