CVE-2017-6298: Debian Linux

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked."

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Ytnef Project Ytnef: up to and including 1.9

Published 2017-02-24. Last modified 2026-06-17.