CVE-2017-18201

CWE-415CWE-119 — Buffer Overflow8 documents7 sources
Severity
9.8CRITICAL
EPSS
0.4%
top 36.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Libcdio
Timeline
PublishedFeb 26
Latest updateMay 14

Description

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDgnu/libcdio< 2.0.0
▶Debianlibcdio< 2.0.0-2+3

Patches

Patch: git.savannah.gnu.org ↗Patch: git.savannah.gnu.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-8qcw-8m67-996h: An issue was discovered in GNU libcdio before 2↗2022-05-14
▶
OSV
CVE-2017-18201: An issue was discovered in GNU libcdio before 2↗2018-02-26
▶
CVEList
CVE-2017-18201: An issue was discovered in GNU libcdio before 2↗2018-02-26
▶

📋Vendor Advisories

2
Red Hat
libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c↗2018-02-27
▶
Debian
CVE-2017-18201: libcdio - An issue was discovered in GNU libcdio before 2.0.0. There is a double free in g...↗2017
▶

💬Community

2
Bugzilla
CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]↗2018-02-27
▶
Bugzilla
CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c↗2018-02-27
▶
CVE-2017-18201 (CRITICAL CVSS 9.8) | An issue was discovered in GNU libc | cvebase.io