Red Hat Security AdvisoryRHSA-2018:3246
libcdio security update
Released 2018-10-30 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcdio-0.92-3.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libcdio-devel-0.92-3.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcdio-0.92-3.el7, libcdio-devel-0.92-3.el7
- Red Hat Enterprise Linux Server (v. 7) libcdio-0.92-3.el7, libcdio-0.92-3.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libcdio-devel-0.92-3.el7, libcdio-devel-0.92-3.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libcdio-0.92-3.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcdio-devel-0.92-3.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libcdio-0.92-3.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libcdio-devel-0.92-3.el7
Fixes 3 records
Priority MEDIUM 48
An issue was discovered in GNU libcdio before 2.0.0.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03269 · Published 2018-02-26 · Fixed CWE-415
Priority MEDIUM 44
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03348 · Published 2018-02-24 · Partial fix CWE-125
Priority LOW 35
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03255 · Published 2018-02-24 · Partial fix CWE-476