CVE-2021-20308 — Integer Overflow or Wraparound in Htmldoc

CWE-190 — Integer Overflow or Wraparound6 documents5 sources
Severity
9.8CRITICALNVD
OSV7.5
EPSS
0.4%
top 39.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Htmldoc Project HtmldocDebian HtmldocDebian Linux
Timeline
PublishedApr 5
Latest updateJan 8

Description

Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/htmldoc< htmldoc 1.9.11-3 (bookworm)
▶Debianhtmldoc_project/htmldoc< 1.9.11-3+3
▶Ubuntuhtmldoc_project/htmldoc< 1.8.27-8ubuntu1+esm3+3

Also affects: Debian Linux 9.0

🔴Vulnerability Details

3
OSV
HTMLDOC vulnerabilities↗2025-01-08
▶
GHSA
GHSA-pmv7-7c58-mhrx: Integer overflow in the htmldoc 1↗2022-05-24
▶
OSV
CVE-2021-20308: Integer overflow in the htmldoc 1↗2021-04-05
▶

📋Vendor Advisories

2
Ubuntu
HTMLDOC vulnerabilities↗2025-01-08
▶
Debian
CVE-2021-20308: htmldoc - Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute...↗2021
▶
CVE-2021-20308 — Integer Overflow or Wraparound | cvebase