CVE-2017-6801: Debian Linux

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Ytnef Project Ytnef: up to and including 1.9.1

Published 2017-03-10. Last modified 2026-06-17.