CVE-2017-6304: Debian Linux

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Ytnef Project Ytnef: up to and including 1.9

Published 2017-02-24. Last modified 2026-06-17.