p PatchFirst

CVE-2017-12142

CVE-2017-12142

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 5.5 · Medium · EPSS 1.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libytnef Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.9.3-1

    Update to 1.9.3-1

  • libytnef Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.9.3-1

    Update to 1.9.3-1

  • libytnef Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.9.3-1

    Update to 1.9.3-1

  • libytnef Ubuntu:16.04:LTS

    Versions
    • 1.5-6
    • 1.5-9
    • 1.5-9ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libytnef Ubuntu:18.04:LTS

    Versions
    • 1.9.2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →