CVE-2017-17670 : In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in th

In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.

Published 2017-12-15 09:29:00

Updated 2019-04-26 15:11:36

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-17670

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Videolan » Vlc Media Player
Versions up to, including, (<=) 2.2.8
cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2017-17670

Top countries where our scanners detected CVE-2017-17670

Top open port discovered on systems with this issue 80

IPs affected by CVE-2017-17670 458

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2017-17670!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2017-17670

EPSS FAQ

0.31%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 66 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-17670

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-17670

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-17670

http://www.securityfocus.com/bid/102214

VideoLAN VLC 'mp4/libmp4.c' Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1040938

VLC Media Player File Processing Type Conversion Error in 'modules/demux/mp4/libmp4.c' Lets Remote Users Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry
http://openwall.com/lists/oss-security/2017/12/15/1

oss-security - CVE-2017-17670: vlc: type conversion vulnerability
Exploit;Mailing List;Third Party Advisory
https://www.debian.org/security/2018/dsa-4203

Debian -- Security Information -- DSA-4203-1 vlc
Third Party Advisory