ALT-PU-2017-1212-1
Closed vulnerabilities
Modified: 2025-04-20
CVE-2017-6298
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6299
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6300
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in version field in lib/tnef-types.h."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6301
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6302
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6303
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6304
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6305
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
Modified: 2025-04-20
CVE-2017-6306
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
- http://www.debian.org/security/2017/dsa-3846
- http://www.openwall.com/lists/oss-security/2017/02/15/4
- http://www.securityfocus.com/bid/96423
- https://github.com/Yeraze/ytnef/pull/27
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/