Vulnerability Name:

CVE-2019-5460 (CCN-164547)

Assigned:2019-07-23
Published:2019-07-23
Updated:2023-03-03
Summary:
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
3.3 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
2.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
1.7 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2019-5460

Source: support@hackerone.com
Type: Mailing List, Third Party Advisory
support@hackerone.com

Source: support@hackerone.com
Type: Mailing List, Third Party Advisory
support@hackerone.com

Source: support@hackerone.com
Type: Mailing List, Third Party Advisory
support@hackerone.com

Source: support@hackerone.com
Type: Mailing List, Third Party Advisory
support@hackerone.com

Source: XF
Type: UNKNOWN
videolan-cve20195460-dos(164547)

Source: CCN
Type: Hackerone Web site
Access Violation Reading EXPLOITABLE_0228

Source: support@hackerone.com
Type: Exploit, Issue Tracking, Third Party Advisory
support@hackerone.com

Source: CCN
Type: VideoLAN Web site
VLC media player

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:videolan:vlc_media_player:3.0.6:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20195460
    V
    		CVE-2019-5460
    2022-06-30
    oval:org.opensuse.security:def:112905
    P
    		libvlc5-3.0.16-1.5 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:106364
    P
    		libvlc5-3.0.16-1.5 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:63194
    P
    		apache2-mod_jk-1.2.43-3.3.1 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:74309
    P
    		Security update for wireshark (Moderate)
    2021-09-13
    oval:org.opensuse.security:def:63420
    P
    		djvulibre-3.5.27-9.28 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63056
    P
    		hdf5-gnu-hpc-1.10.7-2.25 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:62854
    P
    		glibc-devel-32bit-2.26-11.8 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:93443
    P
    		 (Important)
    2021-03-24
    oval:org.opensuse.security:def:62575
    P
    		libplist++-devel-2.0.0-1.31 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62374
    P
    		buildah-1.7.1-3.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62375
    P
    		containerd-1.2.10-5.19.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62398
    P
    		colord-color-profiles-1.4.2-1.37 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:64243
    P
    		e2fsprogs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63987
    P
    		Security update for wicked (Important)
    2020-12-01
    oval:org.opensuse.security:def:74183
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:64089
    P
    		Security update for spice-gtk (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63747
    P
    		Security update for curl (Important)
    2020-12-01
    oval:org.opensuse.security:def:64131
    P
    		Security update for python-ipaddress (Important)
    2020-12-01
    oval:org.opensuse.security:def:63881
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:100156
    P
    		 (Moderate)
    2019-10-03
    oval:org.opensuse.security:def:109933
    P
    		Security update for vlc (Important)
    2019-08-08
    BACK
    videolan vlc media player 3.0.6