Description
Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | grip | 3.2.0-4 | — |
| Debian 14 | libcdaudio | 0.99.9-2.1 | — |
| Debian 13 | grip | 3.2.0-4 | — |
| Debian 13 | libcdaudio | 0.99.9-2.1 | — |
| Debian 12 | libcdaudio | 0.99.9-2.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | gnome-vfs2 +2 | 2.8.2-8.7.el4_7.2 | RHSA-2009:0005 |
| RHEL 3 | gnome-vfs2 +1 | 2.2.5-2E.3.3 | RHSA-2009:0005 |
| RHEL 2 | gnome-vfs +1 | 1.0.1-18.2 | RHSA-2009:0005 |
Advisories 1
- RHSA-2009:0005 Red Hat Security Advisory: gnome-vfs, gnome-vfs2 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- FEDORA-2008-9521 vendor-advisory
- FEDORA-2008-9604 vendor-advisory
- FEDORA-2008-11956 vendor-advisory
- grip-cddb-bo(19648) vdb-entry
- http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714
- 12770 vdb-entry
- RHSA-2005:304 vendor-advisory
- GLSA-200503-21 vendor-advisory
- http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714
- oval:org.mitre.oval:def:10768 vdb-entry signature
- FLSA:152919 vendor-advisory
- 32803 third-party-advisory
- 33824 third-party-advisory
- http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html
- 33389 third-party-advisory
- RHSA-2009:0005 vendor-advisory