PT-2017-18728 · Yerase+2 · Libytnef+2

Bingosxs · Published 2017-05-22 · Updated 2019-05-18 · CVE-2017-9146

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libytnef versions prior to 1.9.3 libytnef version 1.9.2 and earlier

Description The issue is related to the TNEFFillMapi function in lib/ytnef.c, which does not ensure a nonzero count value before a certain memory allocation. This allows remote attackers to cause a denial of service, resulting in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts via a crafted tnef file.

Recommendations For libytnef versions prior to 1.9.3, update to version 1.9.3 or later to resolve the issue. For libytnef version 1.9.2 and earlier, update to version 1.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the TNEFFillMapi function in lib/ytnef.c until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2018-2051

CVE-2017-9146

USN-3667-1

Affected Products

Alt Linux

Ubuntu

Libytnef

References · 17

• 🔥 https://github.com/Yeraze/ytnef/issues/47 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9146 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9473 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9146 · Vendor Advisory
• https://usn.ubuntu.com/3667-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9146 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9058 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-9146 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-9146 · Security Note
• https://osv.dev/vulnerability/USN-3667-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12141 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3667-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9146 · Security Note