Lucene search

K
mageiaGentoo FoundationMGASA-2024-0252
HistoryJul 03, 2024 - 7:36 p.m.

Updated libcdio packages fix security vulnerability

2024-07-0319:36:28
Gentoo Foundation
advisories.mageia.org
13
libcdio security vulnerability buffer overflow iso 9660 image file unixcve-2024-36600

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

Low

Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file. (CVE-2024-36600)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibcdio< 2.1.0-4.1libcdio-2.1.0-4.1.mga9

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

Low