Double free in libcdio - CVE-2017-18201
Published: March 19, 2018 / Updated: March 20, 2018
Vulnerability identifier: #VU11166
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-18201
CWE-ID: CWE-415
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause DoS condition on the target system.
The weakness exists in the get_cdtext_generic() function due to double free. A local attacker can send specially crafted input, trigger memory corruption and cause the service to crash.
The weakness exists in the get_cdtext_generic() function due to double free. A local attacker can send specially crafted input, trigger memory corruption and cause the service to crash.
Affected software
libcdio
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Opensuse
Fedora
libcdio
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Opensuse
Fedora
libcdio
How to mitigate CVE-2017-18201
Update to version 2.0.0.
libcdio - addressed in versions 0.94-5.fc26, 0.94-5.fc27