CVE-2017-9471: Medium severity Ytnef Project Ytnef vulnerability
Published Jun 7, 2017
·Updated
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Affected Software
3 affected componentsFixes available
Ytnef Project Ytnef=1.9.2
Canonical Ubuntu Linux=14.04
debian/libytnef
1.9.3-32.0-12.1.2-1
Remediation
Event History
Jun 7, 2017
CVE Published
via MITRE·04:50 AM
Data Sourced
via MITRE·04:50 AM
Description
Data Sourced
via NVD·05:29 AM
DescriptionSeverityWeaknessAffected Software
Feb 19, 2026
Data Sourced
via Ubuntu·08:26 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·08:27 PM
DescriptionAffected Software
Data Sourced
via Launchpad·08:27 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9471?
CVE-2017-9471 is classified as a denial of service vulnerability that can lead to application crashes.
2
How do I fix CVE-2017-9471?
To fix CVE-2017-9471, update the libytnef package to version 1.9.3-1 or higher.
3
What software is affected by CVE-2017-9471?
CVE-2017-9471 affects ytnef version 1.9.2 and various versions of the libytnef package on Ubuntu and Debian systems.
4
What type of attacks can exploit CVE-2017-9471?
CVE-2017-9471 can be exploited by attackers through crafted files that trigger heap-based buffer over-read.
5
Is there an impact on user data due to CVE-2017-9471?
CVE-2017-9471 primarily results in service disruption but does not directly compromise user data.