Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 14.04 LTS USN-3288-1 Critical: libytnef DoS Threat

ubuntu
Calendar Grey May 15, 2017
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-3290-2 addresses vulnerabilities in libxyz that could potentially result in application failures or arbitrary code execution.
libytnef could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

libytnef could be made to crash or run programs as your login if it opened

a specially crafted file.

Software Description:

- libytnef: improved decoder for application/ms-tnef attachments

Details:

It was discovered that libytnef incorrectly handled malformed TNEF streams.

If a user were tricked into opening a specially crafted TNEF attachment, an

attacker could cause a denial of service or possibly execute arbitrary

code.

Topics%20covered

Topics Covered

security advisory denial of service critical code execution Ubuntu libytnef malformed TNEF

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  libytnef0                       1.5-6ubuntu0.1

After a standard system update you need to restart applications using
libytnef, such as Evolution, to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3288-1

CVE-2017-6298, CVE-2017-6299, CVE-2017-6300, CVE-2017-6301,

CVE-2017-6302, CVE-2017-6303, CVE-2017-6304, CVE-2017-6305,

CVE-2017-6306, CVE-2017-6800, CVE-2017-6801, CVE-2017-6802

Severity
critical
Lowest
Low
Medium
High
Critical

May 15, 2017

Topics%20covered

Topics Covered

security advisory denial of service critical code execution Ubuntu libytnef malformed TNEF

Package Information

https://launchpad.net/ubuntu/+source/libytnef/1.5-6ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.