PT-2022-11289 · Man2Html+2 · Man2Html+2

Untaman · Published 2021-09-07 · Updated 2025-09-04 · CVE-2021-40648

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions man2html version 1.6g

Description The issue allows a filename to be created that overwrites the previous size parameter of the next chunk and the fd, bk, fd nextsize, bk nextsize of the current chunk. This results in the freeing of an arbitrary amount of memory when the next chunk is freed later on.

Recommendations For man2html version 1.6g, consider updating to a newer version that addresses this issue, as the current version allows for the creation of a malicious filename that can cause memory corruption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-11276

CVE-2021-40648

Affected Products

Debian

Red Os

Man2Html

References · 13

• 🔥 https://gist.github.com/untaman/cb58123fe89fc65e3984165db5d40933 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-40648 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-40648 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40648 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-40648 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40648 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-40648 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40648 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11276 · Security Note
• https://t.me/cibsecurity/49560 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-man2html-cve-2021-40648-cve-2021-40647 · Note
• https://t.me/cvenotify/35966 · Telegram Post