Search vulnerabilities

Results 6

Export CSV
CVE-2007-6613

libcdio: long Joliet file name buffer overflow

Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.

CVSS 2.0 · 5.0 Medium EPSS 12.7% KEV · Not listed
Vendors
Gnu
Products
CVE-2024-36600

libcdio: crafted iso image file leads to arbitrary code execution

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
CVE-2017-18201

libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

CVSS 3.0 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
CVE-2017-18199

libcdio: NULL pointer dereference in realloc_symlink in rock.c

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
CVE-2017-18198

libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c

print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.

CVSS 3.0 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors