Libcdio
Vendor:
First CVE: Jan 3, 2008 · Active for 18 years
5
Total CVEs
More Total CVEs than 77% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libcdio over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 3, 2008
18 years ago
Most Recent CVE
Jun 14, 2024
770 days ago
CVE Severity & Scoring
Libcdio5 CVEs
40%
40%
20%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (20.0%)
Network3 (60.0%)
Unknown1 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (80.0%)
High0 (0.0%)
Unknown1 (20.0%)
User Interaction
None2 (40.0%)
Unknown1 (20.0%)
Required2 (40.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (80.0%)
Unknown1 (20.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-18201CRITICAL An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c. | Feb 26, 2018 | 9.8 | 30 | NO | NO |
CVE-2017-18198HIGH print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified othe | Feb 24, 2018 | 8.8 | 28 | NO | NO |
CVE-2007-6613MEDIUM Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows conte | Jan 3, 2008 | 5.0 | 27 | NO | YES |
CVE-2024-36600HIGH Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file. | Jun 14, 2024 | 8.4 | 23 | NO | NO |
CVE-2017-18199MEDIUM realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file. | Feb 24, 2018 | 6.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
20.0% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Libcdio
Top CWEs
Versions
No cataloged versions.