PatchTheCVEvdr vulnerabilities and fixes
Recent CVEs affecting vdr, with upgrade or downgrade steps. 3 tracked.
vdr has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2010-10-20. Highest priority: CVE-2010-3387 (score 38/100).
- CVE-2010-3387 MEDIUM 6.9 DOWNGRADE vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH, whi
- CVE-2008-4985 MEDIUM 6.9 DOWNGRADE vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files
- CVE-2005-0071 MEDIUM 5.0 DOWNGRADE vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.
FAQ
How do I fix vdr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vdr being exploited right now?
None of the tracked vdr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vdr CVE should I patch first?
CVE-2010-3387 currently ranks highest (38/100): vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH, whi.