CVE-2017-18199

CVE-2017-18199

EPSS 3.5%

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz https://access.redhat.com/errata/RHSA-2018:3246 https://savannah.gnu.org/bugs/?52264 http://www.securityfocus.com/bid/103202