VDB
BDU%3A2020-01491
BDU%3A2020-01491
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции lavc_CopyPicture программы-медиапроигрывателя VideoLAN VLC, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Canonical Ltd., Novell Inc., VideoLAN organization, АО «Концерн ВНИИНС» | Debian GNU/Linux, Ubuntu, OpenSUSE Leap, VLC Media Player, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Apr 14, 2020 CVE Published
- Nov 21, 2023 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-13962 url
- https://www.debian.org/security/2019/dsa-4504 url
- https://www.suse.com/security/cve/CVE-2019-13962/ url
- https://trac.videolan.org/vlc/ticket/22240 url
- https://usn.ubuntu.com/4131-1/ url
- https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#kumulyativnoe-obnovlenie url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url