CVE-2017-18198

Name of the Vulnerable Software and Affected Versions GNU libcdio versions prior to 1.0.0

Description The issue is related to a heap-based buffer over-read in the print iso9660 recurse function in iso-info.c. This could allow remote attackers to cause a denial of service or possibly have other unspecified impacts via a crafted iso file. The vulnerability is associated with reading data beyond the buffer boundaries in memory, which can be exploited by a remote attacker to disrupt service or have other effects.

Recommendations For GNU libcdio versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted iso files to minimize the risk of exploitation.