Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libcdio | Jun 18, 2026 | Jun 14, 2024 |
| Debian | — | Upgrade libcdio | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 14, 2024 |
| Ubuntu | — | Upgrade libcdio17 (Ubuntu Pro)Upgrade libiso9660++0t64Upgrade libcdio++1Upgrade libcdio19t64Upgrade libcdio++1t64Upgrade libiso9660++0Upgrade libudf0t64Upgrade libiso9660-11Upgrade libcdio13 (Ubuntu Pro)Upgrade libudf0 (Ubuntu Pro)Upgrade libiso9660-11t64Upgrade libcdio19Upgrade libiso9660-10 (Ubuntu Pro)Upgrade libiso9660-8 (Ubuntu Pro)Upgrade libudf0Upgrade libcdio18 | Jul 3, 2024 | Jun 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub