CVE-2024-36600: Buffer Overflow
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
Other sources
Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
— Ubuntu
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36600?
CVE-2024-36600 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-36600?
To mitigate CVE-2024-36600, upgrade the libcdio package to versions above 1.0.0-2ubuntu2+ or apply the recommended patch from your distribution.
What versions of libcdio are affected by CVE-2024-36600?
CVE-2024-36600 affects libcdio versions below 2.1.1, including 2.1.0 and earlier releases.
Can CVE-2024-36600 be exploited remotely?
Yes, CVE-2024-36600 can be exploited remotely if an attacker delivers a specially crafted ISO 9660 image file.
What is a buffer overflow vulnerability as seen in CVE-2024-36600?
A buffer overflow vulnerability like CVE-2024-36600 occurs when data exceeds the buffer's boundary, potentially allowing an attacker to execute arbitrary code.