CVE-2017-18198: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial o...

Security readout for executives and security teams

CVE-2017-18198 is a flaw in GNU libcdio before 1.0.0. A specially crafted ISO file can make affected parsing code read beyond a heap buffer, potentially crashing the process. Business impact is most likely service disruption where untrusted ISO files are processed. Exposure is likely limited to systems, tools, or services that use vulnerable GNU libcdio code to inspect or process ISO-9660 images from untrusted sources. Prioritize remediation where ISO files are accepted from customers, partners, email, uploads, or automated ingestion. Internal-only tooling with trusted inputs is lower urgency, but should still be updated during normal maintenance. Mitigation focus: Identify packaged or bundled GNU libcdio versions in relevant systems.; Upgrade libcdio to 1.0.0 or a vendor-supported fixed package where applicable.; Review Red Hat advisory guidance for affected Red Hat environments..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.