Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libcdio | Jul 30, 2024 | Jan 3, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/libcdio. | Oct 30, 2017 | Jan 3, 2008 |
| Suse | — | Upgrade libiso9660-5-32bitUpgrade suse-releaseUpgrade libcdio_cdda0Upgrade libcdio7-64bitUpgrade libcdio7-32bitUpgrade libcdio-develUpgrade libiso9660-5Upgrade libcdio_paranoia0Upgrade libcdio-32bitUpgrade libiso9660-5-64bitUpgrade libcdio++0Upgrade libcdio-utilsUpgrade libcdioUpgrade libcdio-64bitUpgrade libudf0Upgrade libcdio7 | Feb 17, 2015 | Jan 3, 2008 |
| Ubuntu | — | Upgrade libcdio6 | Nov 8, 2024 | Jan 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub