PT-2022-7413 · Mplayer+2 · Mplayer+2

Published

2022-09-15

·

Updated

2024-07-30

·

CVE-2022-38600

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Mplayer versions SVN-r38374-13.0.1
Description The issue is related to a memory leak in the Mplayer media player, specifically in the files vf.c and vf vo.c, due to the lack of memory release after its effective term of service. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations For Mplayer version SVN-r38374-13.0.1, consider disabling the use of the vf.c and vf vo.c files as a temporary workaround until a patch is available. Restrict access to these files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2024-05835
CVE-2022-38600

Affected Products

Debian
Mplayer
Red Os