Search for vulnerabilities
Vulnerability details: VCID-dewf-nac3-aaaq
Vulnerability ID VCID-dewf-nac3-aaaq
Aliases CVE-2017-17670
Summary In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.
Status Published
Exploitability 0.5
Weighted Severity 7.9
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
generic_textual Medium http://openwall.com/lists/oss-security/2017/12/15/1
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17670.html
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01240 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01240 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01240 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01240 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.01321 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
epss 0.02045 https://api.first.org/data/v1/epss?cve=CVE-2017-17670
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17670
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2017-17670
cvssv3 8.8 https://nvd.nist.gov/vuln/detail/CVE-2017-17670
generic_textual Medium https://www.openwall.com/lists/oss-security/2017/12/15/5
generic_textual Medium http://www.openwall.com/lists/oss-security/2017/12/15/1
Reference id Reference type URL
http://openwall.com/lists/oss-security/2017/12/15/1
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17670.html
https://api.first.org/data/v1/epss?cve=CVE-2017-17670
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17670
https://www.debian.org/security/2018/dsa-4203
https://www.openwall.com/lists/oss-security/2017/12/15/5
http://www.openwall.com/lists/oss-security/2017/12/15/1
http://www.securityfocus.com/bid/102214
http://www.securitytracker.com/id/1040938
cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2017-17670 https://nvd.nist.gov/vuln/detail/CVE-2017-17670
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2017-17670
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-17670
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.70697
EPSS Score 0.00313
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.