Summary
It was discovered that Yerase's TNEF had null pointer dereferences, infinite
loop, buffer overflow, out of bounds reads, directory traversal issues and
other vulnerabilities. An attacker could use those issues to cause a crash
and consequently a denial of service. (CVE-2017-6298, CVE-2017-6299,
CVE-2017-6300, CVE-2017-6301, CVE-2017-6302, CVE-2017-6303, CVE-2017-6304,
CVE-2017-6305, CVE-2017-6306, CVE-2017-6800, CVE-2017-6801, CVE-2017-6802)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libytnef | 1.5-9ubuntu0.1 |
Vulnerabilities 12
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / ca…
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in …
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in vers…
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integ…
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and …
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal usi…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during …
-
Unscored —
An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFP…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed …
References
-
report
https://ubuntu.com/security/CVE-2017-6298
-
report
https://ubuntu.com/security/CVE-2017-6299
-
report
https://ubuntu.com/security/CVE-2017-6300
-
report
https://ubuntu.com/security/CVE-2017-6301
-
report
https://ubuntu.com/security/CVE-2017-6302
-
report
https://ubuntu.com/security/CVE-2017-6303
-
report
https://ubuntu.com/security/CVE-2017-6304
-
report
https://ubuntu.com/security/CVE-2017-6305
-
report
https://ubuntu.com/security/CVE-2017-6306
-
report
https://ubuntu.com/security/CVE-2017-6800
-
report
https://ubuntu.com/security/CVE-2017-6801
-
report
https://ubuntu.com/security/CVE-2017-6802