CVE-2017-18201

Опубликовано: 26 фев. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

Ссылки

http://www.securityfocus.com/bid/103190
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3246
https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d
Patch
Third Party Advisory
http://www.securityfocus.com/bid/103190
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3246
https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:libcdio:*:*:*:*:*:*:*:*

Версия до 2.0.0 (исключая)

EPSS

Процентиль: 63%

0.00448

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVE-2017-18201

CVSS3: 9.8

ubuntu

больше 7 лет назад

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

CVE-2017-18201

CVSS3: 2.8

redhat

больше 7 лет назад

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

CVE-2017-18201

CVSS3: 9.8

debian

больше 7 лет назад

An issue was discovered in GNU libcdio before 2.0.0. There is a double ...

SUSE-SU-2018:0673-1

suse-cvrf

больше 7 лет назад

Security update for libcdio

GHSA-8qcw-8m67-996h

CVSS3: 9.8

github

больше 3 лет назад

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

EPSS

Процентиль: 63%

0.00448

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-415