CVE-2017-18199

CVE-2017-18199 affects libcdio (GNU) via realloc_symlink in rock.c. A NULL pointer dereference can be triggered by processing a crafted ISO file, enabling remote denial of service. The vulnerability is present in libcdio versions before 1.0.0. Remediation: upgrade to libcdio 1.0.0 or newer (vendo...

CVE-2017-18199

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

GNU libcdio Denial of Service Vulnerability

GNU libcdio is a CD-ROM input and control library that contains a library of functions for accessing CD-ROMs and CD images. A security vulnerability exists in the 'reallocsymlink' function of the rock.c file in GNU libcdio versions prior to 1.0.0. A remote attacker can exploit this vulnerability ...

PT-2018-3809 · Gnu +4 · Gnu Libcdio +4

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 1.0.0 Description: The issue is related to a heap-based buffer over-read in the print iso9660 recurse function in iso-info.c. This could allow remote attackers to cause a denial of service or possibly have other...