CVE-2021-20308 Integer overflow in htmldoc
An integer overflow in htmldoc allows attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-20308?
CVE-2021-20308 is a critical vulnerability in Debian Debian Linux, published on 5 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.
Weakness: CWE-190
Which versions are affected by CVE-2021-20308?
It affects 2 products.
Linux distribution packages (5)
htmldoc SUSE:Package Hub 12 SP1 | All versions | 1.8.28-6.1 |
htmldoc SUSE:Package Hub 15 SP1 | All versions | 1.9.12-bp151.4.3.1 |
htmldoc SUSE:Package Hub 15 SP2 | All versions | 1.9.12-bp152.4.3.1 |
htmldoc openSUSE:Leap 15.2 | All versions | 1.9.12-lp152.4.3.1 |
htmldoc openSUSE:Tumbleweed | All versions | 1.9.12-1.2 |
Products include Debian Debian Linux, Htmldoc Project Htmldoc.
How do I fix CVE-2021-20308?
Upgrade to a fixed version.
Is CVE-2021-20308 being exploited?
There is no known exploitation of CVE-2021-20308 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2021-20308, GHSA-pmv7-7c58-mhrx, UBUNTU-CVE-2021-20308, openSUSE-SU-2021:0882-1, openSUSE-SU-2021:0893-1, openSUSE-SU-2021:0895-1 and 2 more.