CVE-Katalog

CVE-2021-40647

man2html affected and fixed versions

[CVE-Katalog]

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it allows arbitrary write anywhere in the programs memory.

Schweregrad
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixieman2html1.6g-16FixedDistribution-reported fixed boundary[CVE-2021-40647]
Debiansidman2html1.6g-16FixedDistribution-reported fixed boundary[CVE-2021-40647]
Debianforkyman2html1.6g-16FixedDistribution-reported fixed boundary[CVE-2021-40647]

Showing 3 fix observations. All 6 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedman2htmlNot reportedUnknownSource applicability is not establishedProvider not reported
Debianbookwormman2htmlNot reportedAffectedDistribution reports no fix[CVE-2021-40647]
Debianbookwormman2html1.6g-14Affected[CVE-2021-40647]
Debianforkyman2html1.6g-16FixedDistribution-reported fixed boundary[CVE-2021-40647]
Debiansidman2html1.6g-16FixedDistribution-reported fixed boundary[CVE-2021-40647]
Debiantrixieman2html1.6g-16FixedDistribution-reported fixed boundary[CVE-2021-40647]
Original provider fields
{
  "package_releases": [
    {
      "name": "man2html",
      "status": "fixed",
      "release": "sid",
      "version": "1.6g-16"
    },
    {
      "name": "man2html",
      "status": "fixed",
      "release": "forky",
      "version": "1.6g-16"
    },
    {
      "name": "man2html",
      "status": "fixed",
      "release": "trixie",
      "version": "1.6g-16"
    },
    {
      "name": "man2html",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1.6g-14"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1021738,
      "name": "man2html",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.6g-16"
    },
    {
      "bug": 1021738,
      "name": "man2html",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.6g-16"
    },
    {
      "bug": 1021738,
      "name": "man2html",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1.6g-16"
    },
    {
      "bug": 1021738,
      "name": "man2html",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "man2html",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1021738]

Publisher notes

[bookworm] man2html: Minor issue

OpenFactory catalog packages

Die Paketzuordnung läuft.

[Debian 12 (Bookworm)]

  • [man2html]Unbekannt
    Details (2)

    • 1.6g-14 · amd64 · bookworm

      Betroffen

      dsa · man2html · debian · bookworm; dsa · man2html · debian · 12

    • 1.6g-14 · arm64 · bookworm

      Betroffen

      dsa · man2html · debian · bookworm; dsa · man2html · debian · 12

  • [man2html-base]Unbekannt

    Quellpaket: [man2html]

    Details (2)

    • 1.6g-14 · amd64 · bookworm

      Betroffen

      dsa · man2html · debian · bookworm; dsa · man2html · debian · 12

    • 1.6g-14 · arm64 · bookworm

      Betroffen

      dsa · man2html · debian · bookworm; dsa · man2html · debian · 12

[Debian 13 (Trixie)]

  • [man2html]Unbekannt

    Quellpaket: [man2html]

    Details (2)

    • 1.6g-16 · amd64 · trixie

      Behoben · Behoben: 1.6g-16

      dsa · man2html · debian · 13

    • 1.6g-16+b2 · arm64 · trixie

      Behoben · Behoben: 1.6g-16

      dsa · man2html · debian · 13

  • [man2html-base]Unbekannt

    Quellpaket: [man2html]

    Details (2)

    • 1.6g-16 · amd64 · trixie

      Behoben · Behoben: 1.6g-16

      dsa · man2html · debian · 13

    • 1.6g-16+b2 · arm64 · trixie

      Behoben · Behoben: 1.6g-16

      dsa · man2html · debian · 13

Beobachtet:

Referenzen

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]