Candidate: CVE-2017-12144 PublicDate: 2017-08-02 05:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12144 https://github.com/Yeraze/ytnef/issues/51 https://somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html Description: In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM] Patches_libytnef: upstream_libytnef: released (1.9.3-1) precise/esm_libytnef: DNE trusty_libytnef: ignored (reached end-of-life) trusty/esm_libytnef: DNE (trusty was needed) vivid/ubuntu-core_libytnef: DNE xenial_libytnef: ignored (end of standard support, was needed) zesty_libytnef: ignored (reached end-of-life) artful_libytnef: ignored (reached end-of-life) bionic_libytnef: needed cosmic_libytnef: ignored (reached end-of-life) disco_libytnef: not-affected (1.9.3-1) eoan_libytnef: not-affected (1.9.3-1) focal_libytnef: not-affected (1.9.3-1) groovy_libytnef: not-affected (1.9.3-1) hirsute_libytnef: not-affected (1.9.3-1) impish_libytnef: not-affected (1.9.3-1) jammy_libytnef: not-affected (1.9.3-1) devel_libytnef: not-affected (1.9.3-1)