In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service     (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
    (CVE-2021-3404)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-
    of-service (and potentially code execution) due to a double free which can be triggered via a crafted
    file. (CVE-2021-3403)

  - In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service
    (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
    (CVE-2021-3404)

The remote host is affected by the vulnerability described in GLSA-202405-24 (ytnef: Multiple Vulnerabilities)

  - In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-     of-service (and potentially code execution) due to a double free which can be triggered via a crafted     file. (CVE-2021-3403)

  - In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service     (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
    (CVE-2021-3404)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
256873	Linux Distros Unpatched Vulnerability : CVE-2021-3404	Nessus	Misc.	Local	high
427546	Alpine: multiple ytnef packages: security update to 1.9.3-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
427546	Alpine: multiple ytnef packages: security update to 1.9.3-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
195165	GLSA-202405-24 : ytnef: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
400227	Alpine: multiple ytnef packages: security update to 1.9.3-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
400227	Alpine: multiple ytnef packages: security update to 1.9.3-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
400116	Alpine: multiple ytnef packages: security update to 1.9.3-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
400116	Alpine: multiple ytnef packages: security update to 1.9.3-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2021-3404

high

Tenable Plugins

high

high

high

high

high

high

high

high