[{"CVE":"CVE-2017-18198","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549644","bugzilla_description":"CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-18199","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549701","bugzilla_description":"CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-18201","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549707","bugzilla_description":"CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18201.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"}]