CVE-2021-3404: Buffer Overflow
Published Feb 9, 2021
·Updated
In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
Affected Software
3 affected components
Ytnef Project Ytnef=1.9.3
redhat Enterprise Linux=7.0
Fedoraproject Fedora=33
Event History
Feb 9, 2021
Data Sourced
via Red Hat·06:44 PM
DescriptionSeverityAffected Software
Mar 4, 2021
CVE Published
via MITRE·09:10 PM
Data Sourced
via MITRE·09:10 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-3404?
CVE-2021-3404 has a severity rating that may allow remote attackers to cause denial-of-service and potentially code execution.
2
How do I fix CVE-2021-3404?
To mitigate CVE-2021-3404, you should upgrade ytnef to version 1.9.4 or later.
3
Which software versions are affected by CVE-2021-3404?
CVE-2021-3404 affects ytnef version 1.9.3, Red Hat Enterprise Linux 7.0, and Fedora 33.
4
What type of vulnerability is CVE-2021-3404?
CVE-2021-3404 is a heap buffer overflow vulnerability that can be exploited through crafted files.
5
Can CVE-2021-3404 lead to code execution?
Yes, CVE-2021-3404 may potentially allow attackers to execute arbitrary code on vulnerable systems.