Lucene search
UbuntuUSN-6855-1HistoryJun 28, 2024 - 12:00 a.m.
libcdio vulnerability
2024-06-2800:00:00
ubuntu.com
44
ubuntu
libcdio
buffer overflow
vulnerability
denial of service
arbitrary code
iso file
memory operations
esm
lts
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
Low
Releases
- Ubuntu 24.04 LTS
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- libcdio - C++ library to read and control CD-ROM (development files)
Details
Mansour Gashasbi discovered that libcdio incorrectly handled certain
memory operations when parsing an ISO file, leading to a buffer overflow
vulnerability. An attacker could use this to cause a denial of service
or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | libcdio++1t64 | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio++-dev | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio++1t64-dbgsym | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio-dev | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio-utils | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio-utils-dbgsym | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio19t64 | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libcdio19t64-dbgsym | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libiso9660++-dev | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libiso9660++0t64 | < 2.1.0-4.1ubuntu1.2 | UNKNOWN |
References
Related
debiancve
debiancve
CVE-2024-36600
2024-06-14 19:15:50
mageia
mageia
Updated libcdio packages fix security vulnerability
2024-07-03 19:36:28
cvelist
cvelist
CVE-2024-36600
2024-06-14 00:00:00
ubuntucve
ubuntucve
CVE-2024-36600
2024-06-14 00:00:00
veracode
veracode
Buffer Overflow
2024-06-18 04:36:51
vulnrichment
vulnrichment
CVE-2024-36600
2024-06-14 00:00:00
nessus
nessus
osv
osv
libcdio vulnerability
2024-06-28 03:00:12
CVE-2024-36600
2024-06-14 19:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-6855-1)
2024-06-28 00:00:00
Mageia: Security Advisory (MGASA-2024-0252)
2024-07-04 00:00:00
cve
cve
CVE-2024-36600
2024-06-14 19:15:50
alpinelinux
alpinelinux
CVE-2024-36600
2024-06-14 19:15:50
redos
redos
ROS-20240626-08
2024-06-26 00:00:00
redhatcve
redhatcve
CVE-2024-36600
2024-06-18 05:07:09
nvd
nvd
CVE-2024-36600
2024-06-14 19:15:50
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
Low
Related for USN-6855-1