PT-2021-20373 · Ytnef +1 · Ytnef +1

🗓️ 04 Mar 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Ytnef 1.9.3 has a heap buffer overflow risk allowing remote denial-of-service and code execution.

Reporter	Title	Published	Views	Family All 36
AlpineLinux	CVE-2021-3403	4 Mar 202121:10	–	alpinelinux
AlpineLinux	CVE-2021-3404	4 Mar 202121:10	–	alpinelinux
Circl	CVE-2021-3403	5 Mar 202100:47	–	circl
Circl	CVE-2021-3404	5 Mar 202100:47	–	circl
CNNVD	ytnef 资源管理错误漏洞	4 Mar 202100:00	–	cnnvd
CNNVD	ytnef 缓冲区错误漏洞	4 Mar 202100:00	–	cnnvd
CNVD	ytnef heap buffer overflow vulnerability (CNVD-2021-16918)	5 Mar 202100:00	–	cnvd
CNVD	ytnef double release vulnerability	5 Mar 202100:00	–	cnvd
CVE	CVE-2021-3403	4 Mar 202121:10	–	cve
CVE	CVE-2021-3404	4 Mar 202121:10	–	cve

Source	Link
github	www.github.com/Yeraze/ytnef/issues/86
osv	www.osv.dev/vulnerability/CVE-2021-3404
ubuntu	www.ubuntu.com/security/CVE-2021-3404
advisories	www.advisories.mageia.org/MGASA-2022-0316.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-3404
cve	www.cve.org/CVERecord
errata	www.errata.altlinux.org/ALT-PU-2021-3287
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/MGASA-2022-0316
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2021-3404

02 Sep 2022 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

CVSS 26.8

EPSS0.02358

vulnerability management security denial-of-service risk code execution threat heap buffer overflow ytnef software swapword function access restriction