CVE-2017-6308 An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.
HighCVSS 7.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tnef(Debian:12) | < 1.4.12-1.1 | 1.4.12-1.1 |
| debian/tnef(Debian:13) | < 1.4.12-1.1 | 1.4.12-1.1 |
| debian/tnef(Debian:14) | < 1.4.12-1.1 | 1.4.12-1.1 |
| tnef project tnef | <= 1.4.12 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- Debian Security Tracker CVE-2017-6308 vendor-advisory
- DSA-3798 third-party-advisory vendor-advisory
- 96427 third-party-advisory vdb-entry
- github.com patch release-notes third-party-advisory
- github.com issue-tracking patch third-party-advisory
- GLSA-201708-02 third-party-advisory vendor-advisory
- www.x41-dsec.de patch third-party-advisory
- bugs.debian.org issue-tracking