PT-2018-6731 · Gnu+4 · Gnu Libcdio+4

Chris Clayton · Published 2018-01-18 · Updated 2018-11-15 · CVE-2017-18201

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 2.0.0

Description: An issue was discovered in GNU libcdio. There is a double free in the get cdtext generic() function in lib/driver/ cdio generic.c.

Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2018-1054

CESA-2018_3246

CVE-2017-18201

MGASA-2018-0209

MGASA-2018-0225

OPENSUSE-SU-2018_2294-1

OPENSUSE-SU-2024:10675-1

RHSA-2018:3246

RHSA-2018_3246

SUSE-SU-2018:0673-1

SUSE-SU-2018:2236-1

SUSE-SU-2018_0673-1

Affected Products

Alt Linux

Centos

Gnu Libcdio

Red Hat

Suse

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2017-18201 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-18201 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-18201 · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0225 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/NHBEK7JWO4GCS73UAOQOUFGTMIIMYYTR · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18201 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18201 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-18201 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0225.html · Security Note
• https://advisories.mageia.org/MGASA-2018-0209.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:2236-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0673-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3246 · Vendor Advisory
• https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-18201 · Vendor Advisory