Lucene search
K

4 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-18849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat...

5.5CVSS6.2AI score0.00769EPSS
Exploits1References2
Veracode
Veracode
added 2020/09/21 6:34 a.m.5 views

Denial Of Service (DoS)

tnef is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in strdup, allowing an attacker may be able to write to the victim's .ssh/authorizedkeys file through an e-mail message with a crafted winmail.dat application/ms-tnef attachment...

5.5CVSS6.5AI score0.00769EPSS
Exploits1References9Affected Software1
Mageia
Mageia
added 2019/12/06 2:15 p.m.30 views

Updated tnef packages fix security vulnerability

Updated tnef package fixes security vulnerability: In tnef, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup CVE-2019-18849...

5.5CVSS3.2AI score0.00769EPSS
Exploits1References2
OSV
OSV
added 2019/11/11 4:15 a.m.21 views

CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup...

5.5CVSS6.7AI score
Exploits0References7
Rows per page
Query Builder