CVE-2018-11529
Fixed in a distro release EPSS 40%
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.
Products: debian_linux, videolan vlc_media_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | vlc | 3.0.3.r1-1 |
| Debian 12 | vlc | 3.0.3-1-1 |
| Debian 13 | vlc | 3.0.3-1-1 |
| Debian 14 | vlc | 3.0.3-1-1 |
| Debian 9 | vlc | 3.0.3-1-0+deb9u1 |
| Ubuntu Pro 14.04 LTS | vlc | 2.1.6-0ubuntu14.04.5+esm1 |
| Ubuntu Pro 16.04 LTS | vlc | 2.2.2-5ubuntu0.16.04.5+esm1 |