CVE-2021-3403: Double Free
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3403?
CVE-2021-3403 is classified as a high severity vulnerability due to potential denial-of-service and remote code execution risks.
How do I fix CVE-2021-3403?
To fix CVE-2021-3403, it is recommended to upgrade ytnef to version 1.9.4 or later.
What is the impact of CVE-2021-3403 on affected systems?
CVE-2021-3403 may lead to a denial-of-service and could potentially allow remote code execution on affected systems.
Which software versions are affected by CVE-2021-3403?
CVE-2021-3403 specifically affects ytnef version 1.9.3 and may also impact certain versions of Red Hat Enterprise Linux and Fedora.
Who discovered CVE-2021-3403?
The specific details of the discoverer of CVE-2021-3403 have not been publicly disclosed.