CVE-2017-12141 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Ytnef

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer10 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 61.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian LibytnefYtnef Project Ytnef
Timeline
PublishedAug 2
Latest updateMay 14

Description

In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶debiandebian/libytnef< libytnef 1.9.3-1 (bookworm)

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-4qjw-wvqg-mchf: In ytnef 1↗2022-05-14
▶
OSV
libytnef vulnerabilities↗2018-05-31
▶
OSV
CVE-2017-12141: In ytnef 1↗2017-08-02
▶

📋Vendor Advisories

2
Ubuntu
libytnef vulnerabilities↗2018-05-31
▶
Debian
CVE-2017-12141: libytnef - In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the func...↗2017
▶

💬Community

4
Bugzilla
CVE-2017-12141 ytnef: heap-based buffer overflow in TNEFFillMapi function↗2017-08-02
▶
Bugzilla
CVE-2017-12141 CVE-2017-12142 CVE-2017-12144 libytnef: various flaws [epel-all]↗2017-08-02
▶
Bugzilla
CVE-2017-12141 CVE-2017-12142 CVE-2017-12144 ytnef: various flaws [fedora-all]↗2017-08-02
▶
Bugzilla
CVE-2017-12141 CVE-2017-12142 CVE-2017-12144 libytnef: various flaws [fedora-all]↗2017-08-02
▶