Ubuntu: Security Advisory (USN-3667-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3667-1: libytnef vulnerabilities

It was discovered that libytnef incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. CVE-2017-12141, CVE-2017-9146, CVE-2017-9471, CVE-2017-9473 It was discovered that libytnef incorrectly handled certain files. An attacker could possibly use this t...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9473

CVE-2017-9473 affects ytnef 1.9.2 playwrights of the lib/ytnef.c TNEFFillMapi function, where deserialization/processing of crafted winmail.dat content can trigger memory exhaustion and cause denial of service. Public entries in OpenVAS/Ubuntu/Fedora advisories confirm the vulnerability in libytn...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...