An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libcdioUpgrade libcdio-debuginfoUpgrade libcdio-devel | Apr 27, 2020 | Feb 26, 2018 |
| Centos_linux | — | Upgrade libcdio-debuginfoUpgrade libcdioUpgrade libcdio-devel | Aug 28, 2019 | Feb 26, 2018 |
| Debian | — | Upgrade libcdio | Jul 30, 2024 | Feb 26, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libcdio | May 2, 2018 | Feb 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcdio | May 2, 2018 | Feb 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcdio | Dec 11, 2018 | Feb 26, 2018 |
| Oracle_linux | — | Upgrade libcdioUpgrade libcdio-devel | Nov 6, 2018 | Feb 27, 2018 |
| Redhat_linux | — | Upgrade libcdio-debuginfoUpgrade libcdioUpgrade libcdio-devel | Oct 31, 2018 | Feb 26, 2018 |
| Suse | — | Upgrade libcdio-develUpgrade libcdio16Upgrade libiso9660-10-32bitUpgrade libudf0-32bitUpgrade libiso9660-10Upgrade libcdio++0Upgrade libcdio14Upgrade cdio-utilsUpgrade libiso9660-8Upgrade libcdio16-32bitUpgrade libcdio++0-32bitUpgrade libiso9660-11Upgrade libudf0Upgrade libcdio14-32bitUpgrade libcdio19 | Mar 15, 2018 | Feb 26, 2018 |
| Ubuntu | — | Upgrade libcdio | Nov 19, 2024 | Feb 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub