VLC kafofin watsa labarai rauni

A cikin VLC Media Player gano rauni (CVE-2019-13615), wanda zai iya haifar da kisa ga masu kai hari lokacin kunna bidiyo na musamman na MKV (amfani da samfur). Matsalar tana faruwa ne ta hanyar samun dama ga wurin ƙwaƙwalwar ajiya a waje da keɓaɓɓen buffer a cikin akwatin buɗe kayan aikin watsa labarai na MKV kuma yana bayyana a cikin sakin yanzu 3.0.7.1.

Gyara don yanzu babu, da kuma sabunta fakiti (Debian, Ubuntu, RHEL, Fedora, SUSE, FreeBSD). Rashin lahani sanyawa Muhimmin matakin haɗari (9.8 cikin 10 CVSS). A lokaci guda, da VLC developers yi imanicewa matsalar tana iyakance ga ƙwanƙwasa ƙwaƙwalwar ajiya kuma ba za a iya amfani da ita don haifar da aiwatar da lambar ko haifar da haɗari ba.

source: budenet.ru