Unscored CVE-2017-12142 EUVD-2017-3726GHSA-wx58-mfwq-x7r3

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a deni…

Published Aug 2, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: libytnef Package: libytnef Ecosystem: Debian Ecosystem: Ubuntu

Description

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libytnef	1.9.3-1	—
Debian 13	libytnef	1.9.3-1	—
Debian 12	libytnef	1.9.3-1	—

Ubuntu