CVE-2017-6308
Publication date 24 February 2017
Last updated 25 August 2025
Ubuntu priority
Description
An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| tnef | ||
| 16.04 LTS xenial |
Fixed 1.4.9-1+deb8u2build0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 1.4.9-1+deb8u2build0.14.04.1
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.8 · High
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |