CVE-2021-40647 - CVE House
Back to Database
Status published Medium CVE-2021-40647

In man2html 1.6g, a specific string being read in from...

Vulnerability Description

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it allows arbitrary write anywhere in the programs memory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-40647

Credits & Attribution

No credits recorded in the NVD database.

References

More from man2html project

View All →
CVE-2021-40648
In man2html 1.6g, a filename can be created to overwrite...
Medium 5.5

Affected Vendor

man2html project

View all reports →

Affected Software

man2html
Vulnerable Versions:
1.6g

Timeline

Official Publish: September 9th, 2022
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.