Bug 1549707 (CVE-2017-18201) - CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c
Summary: CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cd...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2017-18201
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1549712 1549713 1553621
Blocks: 1549715
TreeView+ depends on / blocked
 
Reported: 2018-02-27 17:02 UTC by Pedro Sampaio
Modified: 2021-02-17 00:45 UTC (History)
4 users (show)

Fixed In Version: libcdio 2.0.0
Clone Of:
Environment:
Last Closed: 2019-06-08 03:41:42 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2018:3246 0 None None None 2018-10-30 07:53:12 UTC

Description Pedro Sampaio 2018-02-27 17:02:02 UTC 
An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

Upstream patch:

https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=dec2f876c2d7162da213429bce1a7140cdbdd734

External References:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887640
Comment 1 Pedro Sampaio 2018-02-27 17:08:59 UTC 
Created libcdio tracking bugs for this issue:

Affects: fedora-all [bug 1549713]
Comment 6 rocky 2018-03-13 14:59:39 UTC 
I am trying to understand the this bug tracking system. 

When I read:

> Affects: fedora-all [bug 1549713]

What does "fedora-all" mean? As noted previously, the bug was introduced sometime after 0.90 (definitely in 0.94) but fixed in 2.0.0
Comment 7 Adrian Reber 2018-03-13 15:02:20 UTC 
I understand 'fedora-all' as all active releases. Currently that would be F26 and F27 with libcdio-0.94 and F-28 and rawhide with libcdio-2.0.0

I patched libcdio for F26 and F27. F28 and rawhide should be on the safe side with 2.0.0.
Comment 8 rocky 2018-03-13 15:12:42 UTC 
Thanks for the clarification. So I gather rawhide is not considered to be in "fedora-all"?

Not a big deal. I'm just trying to understand these things in detail and wondering about how accurate such trackers are. Since I happen to know what's up with this one, I'm can it as a gauge for other bug reports where I really have no idea.
Comment 9 rocky 2018-03-13 15:14:09 UTC 
I'm can it -> I can use it
Comment 10 errata-xmlrpc 2018-10-30 07:53:07 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:3246 https://access.redhat.com/errata/RHSA-2018:3246
Note You need to log in before you can comment on or make changes to this bug.