Summary
Mansour Gashasbi discovered that libcdio incorrectly handled certain
memory operations when parsing an ISO file, leading to a buffer overflow
vulnerability. An attacker could use this to cause a denial of service
or possibly execute arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libcdio | 2.0.0-2ubuntu0.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | libcdio | 2.1.0-3ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | libcdio | 2.1.0-4.1ubuntu1.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libcdio | 0.83-4.1ubuntu1+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libcdio | 0.83-4.2ubuntu1+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libcdio | 1.0.0-2ubuntu2+esm2 |
Vulnerabilities 1
-
High 8.4
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a craf…
References
-
report
https://ubuntu.com/security/CVE-2024-36600