Name: CVE-2017-6308: Integer Overflow or Wraparound
Creator: Rapid7
Published: 2017-02-24T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-6308, CWE-190, CVSS 7.8, EPSS 0.00404

An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.

CVSS Details

CVSS 3.0 Base Score: 7.8
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade tnef	Mar 2, 2017	Feb 23, 2017
Freebsd	—	Upgrade tnef	Nov 9, 2024	Oct 26, 2024
Gentoo Linux	—	Upgrade net-mail/tnef.	Oct 30, 2017	Feb 23, 2017
Ubuntu	—	Upgrade tnef	Nov 19, 2024	Feb 24, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business