PT-2018-6731 · Gnu+4 · Gnu Libcdio+4

Chris Clayton · Publicado 2018-01-18 · Atualizado 2018-11-15 · CVE-2017-18201

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 2.0.0

Description: An issue was discovered in GNU libcdio. There is a double free in the get cdtext generic() function in lib/driver/ cdio generic.c.

Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2018-1054

CESA-2018_3246

CVE-2017-18201

MGASA-2018-0209

MGASA-2018-0225

OPENSUSE-SU-2018_2294-1

OPENSUSE-SU-2024:10675-1

RHSA-2018:3246

RHSA-2018_3246

SUSE-SU-2018:0673-1

SUSE-SU-2018:2236-1

SUSE-SU-2018_0673-1

Produtos afetados

Alt Linux

Centos

Gnu Libcdio

Red Hat

Suse

Referências · 25

• https://bugzilla.suse.com/1082877 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-18201 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-18201 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-18201 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2018-0225 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/NHBEK7JWO4GCS73UAOQOUFGTMIIMYYTR · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22740 · Nota
• https://ubuntu.com/security/CVE-2017-18201 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-18201 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2018/suse-su-20180673-1 · Nota
• https://security-tracker.debian.org/tracker/CVE-2017-18201 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22902 · Nota
• https://advisories.mageia.org/MGASA-2018-0225.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-18201 · Nota
• https://advisories.mageia.org/MGASA-2018-0209.html · Nota de Segurança