An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.

Update to 1.4.15. Fixes CVE-2017-8911

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tnef fixes the following issues :

Security issue fixed :

  - CVE-2017-8911: Fix underflow problem (boo#1038837).

Bug fixes :

  - Update to version 1.4.15 :

  - Use __builtin_mul_overflow when available.

  - Fixing Unicode related bugs introduced in previous     release.

  - Prevent against various cases of null derefences, buffer     overshooting, and fix some integer overflows.

The remote host is affected by the vulnerability described in GLSA-201708-02 (TNEF: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in TNEF. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to process a specially crafted       MIME attachment of type &ldquo;application/ms-tnef&rdquo; using TNEF, possibly       resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

It was discovered that tnef, a tool used to unpack MIME attachments of type 'application/ms-tnef', did not correctly validate its input. An attacker could exploit this by tricking a user into opening a malicious attachment, which would result in a denial-of-service by application crash.

CVE-2017-8911

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.

For Debian 7 'Wheezy', these problems have been fixed in version 1.4.9-1+deb7u3.

We recommend that you upgrade your tnef packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
105919	Fedora 27 : tnef (2017-8489b17872)	Nessus	Fedora Local Security Checks	critical
104770	openSUSE Security Update : tnef (openSUSE-2017-1307)	Nessus	SuSE Local Security Checks	critical
104159	Fedora 26 : tnef (2017-c2882ae75b)	Nessus	Fedora Local Security Checks	critical
104149	Fedora 25 : tnef (2017-2b28a055f2)	Nessus	Fedora Local Security Checks	critical
102532	GLSA-201708-02 : TNEF: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
100560	Debian DSA-3869-1 : tnef - security update	Nessus	Debian Local Security Checks	critical
100481	Debian DLA-962-1 : tnef security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2017-8911

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical