CVE-2017-18198
published 2018-02-24CVE-2017-18198: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly…
PriorityP340high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
3.43%
87.5th percentile
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libcdio | < libcdio 1.0.0-1 (bookworm) | libcdio 1.0.0-1 (bookworm) |
| gnu | libcdio | < 1.0.0 | 1.0.0 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 0.83-4.1ubuntu1+esm1 | 0.83-4.1ubuntu1+esm1 |
| gnu | libcdio | >= 0 < 0.83-4.2ubuntu1+esm1 | 0.83-4.2ubuntu1+esm1 |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_debian8.8LOW
vendor_redhat8.8HIGH
vendor_ubuntu8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
libcdio vulnerabilities
vendor_ubuntu·2022-08-10·CVSS 8.8
CVE-2017-18198 [HIGH] libcdio vulnerabilities
Title: libcdio vulnerabilities
Summary: Several security issues were fixed in libcdio.
Zhao Liang discovered that libcdio was not properly performing memory
management operations when processing ISO files, which could result
in a heap buffer overflow or in a NULL pointer dereference. If a user
or automated system were tricked into opening a specially crafted file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2017-18198, CVE-2017-18199)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c
vendor_redhat·2018-02-27·CVSS 8.8
CVE-2017-18198 [HIGH] CWE-125 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c
libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS.
Package: libcdio (Red Hat Enterprise Linux 6) - Affected
Package: libcdio (Red Hat Enterprise Linux 8) - Not affected
Debian
CVE-2017-18198: libcdio - print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote at...
vendor_debian·2017·CVSS 8.8
CVE-2017-18198 [HIGH] CVE-2017-18198: libcdio - print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote at...
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
Scope: local
bookworm: resolved (fixed in 1.0.0-1)
bullseye: resolved (fixed in 1.0.0-1)
forky: resolved (fixed in 1.0.0-1)
sid: resolved (fixed in 1.0.0-1)
trixie: resolved (fixed in 1.0.0-1)
OSV
libcdio vulnerabilities
osv·2022-08-10·CVSS 8.8
CVE-2017-18198 [HIGH] libcdio vulnerabilities
libcdio vulnerabilities
Zhao Liang discovered that libcdio was not properly performing memory
management operations when processing ISO files, which could result
in a heap buffer overflow or in a NULL pointer dereference. If a user
or automated system were tricked into opening a specially crafted file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2017-18198, CVE-2017-18199)
GHSA
GHSA-6wcx-ghh6-m249: print_iso9660_recurse in iso-info
ghsa_unreviewed·2022-05-14
CVE-2017-18198 [HIGH] CWE-125 GHSA-6wcx-ghh6-m249: print_iso9660_recurse in iso-info
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
OSV
CVE-2017-18198: print_iso9660_recurse in iso-info
osv·2018-02-24·CVSS 8.8
CVE-2017-18198 [HIGH] CVE-2017-18198: print_iso9660_recurse in iso-info
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c
bugzilla·2018-02-27·CVSS 8.8
CVE-2017-18198 [HIGH] CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c
CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c
A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS.
Upstream issue:
https://savannah.gnu.org/bugs/?52265
Upstream release:
http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz
Discussion:
Created libcdio tracking bugs for this issue:
Affects: fedora-all [bug 1549713]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2018:3246 https://access.redhat.com/errata/RHSA-2018:3246
Bugzilla
CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]
bugzilla·2018-02-27·CVSS 8.8
CVE-2017-18198 [HIGH] CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]
CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versi
http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gzhttp://www.securityfocus.com/bid/103200https://access.redhat.com/errata/RHSA-2018:3246https://savannah.gnu.org/bugs/?52265http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gzhttp://www.securityfocus.com/bid/103200https://access.redhat.com/errata/RHSA-2018:3246https://savannah.gnu.org/bugs/?52265
2018-02-24
Published