Skip to content
OpenAdvisories
Unscored RHSA-2018:3246 3 CVEs

Red Hat Security Advisory: libcdio security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client libcdio 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client libcdio-debuginfo 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client libcdio-devel 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode libcdio 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode libcdio-debuginfo 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode libcdio-devel 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server libcdio 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server libcdio-debuginfo 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server libcdio-devel 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation libcdio 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation libcdio-debuginfo 0:0.92-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation libcdio-devel 0:0.92-3.el7

Vulnerabilities 3

  • Unscored —
    CVE-2017-18198

    print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (h…

    libcdio libcdio Debian Ubuntu
  • Unscored —
    CVE-2017-18199

    realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointe…

    libcdio libcdio Debian Ubuntu
  • Unscored —
    CVE-2017-18201

    An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio…

    libcdio Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549701
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549707
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3246.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-18198
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-18198
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-18198
  • report
    https://access.redhat.com/security/cve/CVE-2017-18199
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-18199
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-18199
  • report
    https://access.redhat.com/security/cve/CVE-2017-18201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-18201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-18201
  • article
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887640