Name: CVE-2024-36600: Stack-based Buffer Overflow
Creator: Rapid7
Published: 2024-06-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2024-36600, CVSS 8.4, EPSS 0.0036

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.

CVSS Details

CVSS 3.1 Base Score: 8.4
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade libcdio	Jun 18, 2026	Jun 14, 2024
Debian	—	Upgrade libcdio	Jul 27, 2026	Jul 27, 2026
Redhat_linux	—	No solution exists	Jul 9, 2025	Jun 14, 2024
Ubuntu	—	Upgrade libcdio19Upgrade libudf0 (Ubuntu Pro)Upgrade libiso9660-10 (Ubuntu Pro)Upgrade libiso9660-8 (Ubuntu Pro)Upgrade libcdio13 (Ubuntu Pro)Upgrade libudf0Upgrade libiso9660-11t64Upgrade libcdio18Upgrade libiso9660++0t64Upgrade libcdio++1Upgrade libcdio++1t64Upgrade libiso9660-11Upgrade libcdio17 (Ubuntu Pro)Upgrade libcdio19t64Upgrade libiso9660++0Upgrade libudf0t64	Jul 3, 2024	Jun 14, 2024

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence