Unscored CVE-2017-9474 EUVD-2017-18406GHSA-7cgr-863x-4vff

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read…

Published Jun 7, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: libytnef Package: libytnef Ecosystem: Debian Ecosystem: Ubuntu

Description

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libytnef	1.9.3-1	—
Debian 13	libytnef	1.9.3-1	—
Debian 12	libytnef	1.9.3-1	—

Ubuntu