CVE-2017-9473: Medium severity Ytnef Project Ytnef vulnerability
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9473?
CVE-2017-9473 has a severity rating of moderate due to its potential to cause a denial of service through memory consumption.
How do I fix CVE-2017-9473?
To fix CVE-2017-9473, upgrade to versions 1.9.3-1 or later for Debian and Ubuntu as specified in the software repository.
What is the impact of CVE-2017-9473?
The impact of CVE-2017-9473 is a denial of service that can occur when processing crafted files, leading to excessive memory usage.
Which software is affected by CVE-2017-9473?
CVE-2017-9473 affects ytnef version 1.9.2 and lower across different operating systems and package managers.
Can I use older versions of libytnef after CVE-2017-9473?
No, it is not safe to use older versions of libytnef, specifically anything before version 1.9.3, due to the vulnerability in CVE-2017-9473.