Lucene search
+L

172 matches found

NVD
NVD
•added 2018/02/24 6:29 a.m.•24 views

CVE-2017-18199

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

6.5CVSS7.1AI score0.03255EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2018/02/24 6:29 a.m.•19 views

UBUNTU-CVE-2017-18199

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

6.5CVSS6.8AI score0.03255EPSS
SaveExploits1References5
Mend
Mend
•added 2018/02/24 6:00 a.m.•4 views

CVE-2017-18199

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

7.1CVSS0.03255EPSS
SaveExploits1References5
Mend
Mend
•added 2018/02/24 6:00 a.m.•5 views

CVE-2017-18198

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

8.8CVSS0.03348EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2018/02/24 6:00 a.m.•37 views

CVE-2017-18199

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

7.2AI score0.03255EPSS
SaveExploits1References4
CVE
CVE
•added 2018/02/24 6:00 a.m.•129 views

CVE-2017-18199

CVE-2017-18199 affects libcdio (GNU) via realloc_symlink in rock.c. A NULL pointer dereference can be triggered by processing a crafted ISO file, enabling remote denial of service. The vulnerability is present in libcdio versions before 1.0.0. Remediation: upgrade to libcdio 1.0.0 or newer (vendo...

6.5CVSS7AI score0.03255EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2018/02/24 6:00 a.m.•112 views

CVE-2017-18198

CVE-2017-18198 affects libcdio’s ISO handling: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a heap-based buffer over-read (and possibly other impact) by supplying a crafted ISO file. The connected advisories confirm multiple vendors package libc...

8.8CVSS9.2AI score0.03348EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2018/02/24 6:00 a.m.•33 views

CVE-2017-18199

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

6.5CVSS7.5AI score0.03255EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/24 12:00 a.m.•5 views

CVE-2017-18198: Out-of-bounds Read

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

8.8CVSS7.1AI score0.03348EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/24 12:00 a.m.•6 views

CVE-2017-18199: NULL Pointer Dereference

reallocsymlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service NULL Pointer Dereference via a crafted iso file...

6.5CVSS7AI score0.03255EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/02/24 12:00 a.m.•12 views

GNU libcdio Denial of Service Vulnerability

GNU libcdio is a CD-ROM input and control library that contains a library of functions for accessing CD-ROMs and CD images. A security vulnerability exists in the 'reallocsymlink' function of the rock.c file in GNU libcdio versions prior to 1.0.0. A remote attacker can exploit this vulnerability ...

6.5CVSS6.8AI score0.03255EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/02/24 12:00 a.m.•10 views

GNU libcdio 'print_iso9660_recurse' function denial of service vulnerability

GNU libcdio is a CD-ROM input and control library that contains a library of functions for accessing CD-ROMs and CD images. A denial of service vulnerability exists in the 'printiso9660recurse' function of the iso-info.c file in GNU libcdio versions prior to 1.0.0. A remote attacker can exploit...

8.8CVSS6.9AI score0.03348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/01/18 12:00 a.m.•25 views

PT-2018-3809 · Gnu +4 · Gnu Libcdio +4

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 1.0.0 Description: The issue is related to a heap-based buffer over-read in the print iso9660 recurse function in iso-info.c. This could allow remote attackers to cause a denial of service or possibly have other...

10CVSS7.9AI score0.03348EPSS
SaveExploits1References36
Positive Technologies
Positive Technologies
•added 2018/01/18 12:00 a.m.•11 views

PT-2018-3810 · Gnu +5 · Gnu Libcdio +5

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 1.0.0 Description: The issue is related to the realloc symlink function in rock.c and is associated with pointer dereference errors. It can be exploited by remote attackers to cause a denial of service...

9.8CVSS7.6AI score0.03348EPSS
SaveExploits1References52
Positive Technologies
Positive Technologies
•added 2018/01/18 12:00 a.m.•4 views

PT-2018-6731

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 2.0.0 Description: An issue was discovered in GNU libcdio. There is a double free in the get cdtext generic function in lib/driver/ cdio generic.c. Recommendations: For versions prior to 2.0.0, update to version...

9.8CVSS0.03269EPSS
SaveExploits0References25
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•19 views

Gentoo Linux Information Disclosure

The vulnerability of the libcdio package up to version 0.78.2-r4 of the Gentoo Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited remotely...

5CVSS5.4AI score0.12725EPSS
SaveExploits3References3Affected Software1
OpenVAS
OpenVAS
•added 2009/10/13 12:00 a.m.•33 views

SLES10: Security update for libcdio

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libcdio More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

5CVSS6.4AI score0.12725EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2009/10/13 12:00 a.m.•23 views

SLES10: Security update for libcdio

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libcdio More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

5CVSS6.4AI score0.12725EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•32 views

Mandriva Linux Security Advisory : libcdio (MDVSA-2008:037)

A stack-based buffer overflow was discovered in libcdio that allowed context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image file that contains a long joliet file name. In addition, a fix for failed UTF-8 conversions that would...

5CVSS6.4AI score0.12725EPSS
SaveExploits3References1
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•52 views

Mandriva Update for libcdio MDVSA-2008:037 (libcdio)

Check for the Version of libcdio OpenVAS Vulnerability Test Mandriva Update for libcdio MDVSA-2008:037 libcdio Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

5CVSS0.7AI score0.12725EPSS
SaveExploits3References2
Rows per page
Query Builder