PT-2021-5764 · Htmldoc+5 · Htmldoc+5

Kangwoosukeq · Published 2021-03-08 · Updated 2025-01-08 · CVE-2021-20308

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions htmldoc versions 1.9.11 and earlier

Description The issue is related to an integer overflow that may allow attackers to execute arbitrary code and cause a denial of service. Exploitation of this issue can allow a remote attacker to access confidential data, compromise its integrity, and cause a service disruption.

Recommendations For htmldoc versions 1.9.11 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2022-2627

ALT-PU-2022-2729

BDU:2022-00209

CVE-2021-20308

DLA-2700-1

MGASA-2021-0332

OPENSUSE-SU-2021:0882-1

OPENSUSE-SU-2021:0893-1

OPENSUSE-SU-2021:0895-1

OPENSUSE-SU-2021:1266-1

OPENSUSE-SU-2021_0882-1

OPENSUSE-SU-2024:10848-1

SUSE-SU-2022:14898-1

USN-7189-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Suse

Ubuntu

Htmldoc

References · 51

• 🔥 https://github.com/michaelrsweet/htmldoc/issues/423 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1946289 · Exploit
• https://bdu.fstec.ru/vul/2022-00209 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:1266-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-34119 · Vendor Advisory
• https://debian.org/security/2021/dsa-4928 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0882-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10848-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-20308 · Security Note
• https://advisories.mageia.org/MGASA-2021-0332.html · Security Note
• https://ubuntu.com/security/notices/USN-7189-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20308 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-23158 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-20308 · Vendor Advisory