Описание
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libcdio | fixed | 2.2.0-4.1 | package | |
| libcdio | fixed | 2.2.0-4.1~deb13u1 | trixie | package |
| libcdio | not-affected | bookworm | package | |
| libcdio | not-affected | bullseye | package |
Примечания
https://github.com/gashasbi/My-Reports/tree/main/CVE-2024-36600
Introduced by: https://github.com/libcdio/libcdio/commit/4c840665c6d9cf2ff1cf0cd12f91b25030776c74 (2.1.1)
https://github.com/libcdio/libcdio/pull/32
Fixed by: https://github.com/libcdio/libcdio/commit/417478a7474af41c27ab3f876f31783fa06a5dbc (2.2.1.rc1)
https://lists.gnu.org/archive/html/libcdio-devel/2024-04/msg00000.html
https://lists.gnu.org/archive/html/libcdio-devel/2024-05/msg00005.html
EPSS
Связанные уязвимости
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
Уязвимость компонента ISO 9660 Image File Handler библиотеки libcdio, позволяющая нарушителю выполнить произвольный код
EPSS