CVE-2017-18199
published 2018-02-24CVE-2017-18199: realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
PriorityP426medium6.5CVSS 3.0
AVNACLPRNUIRSUCNINAH
EPSS
3.33%
87.2th percentile
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libcdio | < libcdio 1.0.0-1 (bookworm) | libcdio 1.0.0-1 (bookworm) |
| gnu | libcdio | < 1.0.0 | 1.0.0 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 1.0.0-1 | 1.0.0-1 |
| gnu | libcdio | >= 0 < 0.83-4.1ubuntu1+esm1 | 0.83-4.1ubuntu1+esm1 |
| gnu | libcdio | >= 0 < 0.83-4.2ubuntu1+esm1 | 0.83-4.2ubuntu1+esm1 |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian6.5LOW
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
libcdio vulnerabilities
vendor_ubuntu·2022-08-10·CVSS 8.8
CVE-2017-18198 [HIGH] libcdio vulnerabilities
Title: libcdio vulnerabilities
Summary: Several security issues were fixed in libcdio.
Zhao Liang discovered that libcdio was not properly performing memory
management operations when processing ISO files, which could result
in a heap buffer overflow or in a NULL pointer dereference. If a user
or automated system were tricked into opening a specially crafted file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2017-18198, CVE-2017-18199)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
libcdio: NULL pointer dereference in realloc_symlink in rock.c
vendor_redhat·2018-02-27·CVSS 6.5
CVE-2017-18199 [MEDIUM] CWE-119 libcdio: NULL pointer dereference in realloc_symlink in rock.c
libcdio: NULL pointer dereference in realloc_symlink in rock.c
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
A NULL pointer dereference flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files.
Package: libcdio (Red Hat Enterprise Linux 6) - Affected
Package: libcdio (Red Hat Enterprise Linux 8) - Not affected
Debian
CVE-2017-18199: libcdio - realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to...
vendor_debian·2017·CVSS 6.5
CVE-2017-18199 [MEDIUM] CVE-2017-18199: libcdio - realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to...
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
Scope: local
bookworm: resolved (fixed in 1.0.0-1)
bullseye: resolved (fixed in 1.0.0-1)
forky: resolved (fixed in 1.0.0-1)
sid: resolved (fixed in 1.0.0-1)
trixie: resolved (fixed in 1.0.0-1)
OSV
libcdio vulnerabilities
osv·2022-08-10·CVSS 8.8
CVE-2017-18198 [HIGH] libcdio vulnerabilities
libcdio vulnerabilities
Zhao Liang discovered that libcdio was not properly performing memory
management operations when processing ISO files, which could result
in a heap buffer overflow or in a NULL pointer dereference. If a user
or automated system were tricked into opening a specially crafted file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2017-18198, CVE-2017-18199)
GHSA
GHSA-g22c-3rrr-vfp7: realloc_symlink in rock
ghsa_unreviewed·2022-05-14
CVE-2017-18199 [MEDIUM] CWE-476 GHSA-g22c-3rrr-vfp7: realloc_symlink in rock
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
OSV
CVE-2017-18199: realloc_symlink in rock
osv·2018-02-24·CVSS 6.5
CVE-2017-18199 [MEDIUM] CVE-2017-18199: realloc_symlink in rock
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c
bugzilla·2018-02-27·CVSS 6.5
CVE-2017-18199 [MEDIUM] CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c
CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c
The realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ISO file.
Upstream issue:
https://savannah.gnu.org/bugs/?52264
Discussion:
Created libcdio tracking bugs for this issue:
Affects: fedora-all [bug 1549713]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2018:3246 https://access.redhat.com/errata/RHSA-2018:3246
Bugzilla
CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]
bugzilla·2018-02-27·CVSS 8.8
CVE-2017-18198 [HIGH] CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]
CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versi
http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gzhttp://www.securityfocus.com/bid/103202https://access.redhat.com/errata/RHSA-2018:3246https://savannah.gnu.org/bugs/?52264http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gzhttp://www.securityfocus.com/bid/103202https://access.redhat.com/errata/RHSA-2018:3246https://savannah.gnu.org/bugs/?52264
2018-02-24
Published