Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-18199

Опубликовано: 27 фев. 2018
Источник: redhat
CVSS3: 2.8

Описание

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

A NULL pointer dereference flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libcdioAffected
Red Hat Enterprise Linux 8libcdioNot affected
Red Hat Enterprise Linux 7libcdioFixedRHSA-2018:324630.10.2018

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=1549701libcdio: NULL pointer dereference in realloc_symlink in rock.c

2.8 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

CVSS3: 6.5
nvd
больше 7 лет назад

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

CVSS3: 6.5
debian
больше 7 лет назад

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote at ...

suse-cvrf
около 5 лет назад

Security update for libcdio

suse-cvrf
около 5 лет назад

Security update for libcdio

2.8 Low

CVSS3