MGASA-2018-0209

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2018-0209.html
Import Source
https://advisories.mageia.org/MGASA-2018-0209.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2018-0209
Related
Published
2018-04-22T19:59:03Z
Modified
2018-04-22T19:43:16Z
Summary
Updated libcdio packages fix security vulnerabilities
Details

A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS (CVE-2017-18198).

A NULL pointer dereference flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files (CVE-2017-18199).

A double-free flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files (CVE-2017-18201).

References
Credits

Affected packages

Mageia:6 / libcdio

Package

Name
libcdio
Purl
pkg:rpm/mageia/libcdio?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.94-1.1.mga6

Ecosystem specific 

{
    "section": "core"
}