CVE-2017-18198

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.36%

Published

Feb 24, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.

Weaknesses (CWE)

CWE-125

Affected Products (1)

gnu · libcdio (up to 1.0.0)vulnerable

References (8)

http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz

Vendor Advisory

http://www.securityfocus.com/bid/103200

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:3246

https://savannah.gnu.org/bugs/?52265

Vendor Advisory

http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz

Vendor Advisory

http://www.securityfocus.com/bid/103200

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:3246

https://savannah.gnu.org/bugs/?52265

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs