Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libcdio | Jul 30, 2024 | Jan 3, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/libcdio. | Oct 30, 2017 | Jan 3, 2008 |
| Suse | — | Upgrade libcdio-utilsUpgrade libcdio++0Upgrade libcdio-64bitUpgrade libiso9660-5Upgrade libiso9660-5-64bitUpgrade libcdio-32bitUpgrade libcdio_paranoia0Upgrade libcdioUpgrade libudf0Upgrade libcdio7Upgrade libcdio7-32bitUpgrade libcdio7-64bitUpgrade libiso9660-5-32bitUpgrade libcdio_cdda0Upgrade libcdio-develUpgrade suse-release | Feb 17, 2015 | Jan 3, 2008 |
| Ubuntu | — | Upgrade libcdio6 | Nov 8, 2024 | Jan 3, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub