CVE-2017-12144
CVE-2017-12144
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
CVSS 5.5 · Medium · EPSS 1.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libytnef Debian:12
- Affected ranges
- ECOSYSTEM: < 1.9.3-1
Update to 1.9.3-1
libytnef Debian:13
- Affected ranges
- ECOSYSTEM: < 1.9.3-1
Update to 1.9.3-1
libytnef Debian:14
- Affected ranges
- ECOSYSTEM: < 1.9.3-1
Update to 1.9.3-1
libytnef Ubuntu:16.04:LTS
- Versions
- 1.5-6
- 1.5-9
- 1.5-9ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libytnef Ubuntu:18.04:LTS
- Versions
- 1.9.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/Yeraze/ytnef/issues/51
- https://somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html
- http://www.securityfocus.com/bid/100098
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://nvd.nist.gov/vuln/detail/CVE-2017-12144