Critical severity9.8NVD Advisory· Published Apr 5, 2021· Updated Jun 17, 2026
CVE-2021-20308
CVE-2021-20308
Description
Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- htmldoc/htmldocdescription
- osv-coords6 versionspkg:rpm/opensuse/htmldoc&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/htmldoc&distro=openSUSE%20Tumbleweedpkg:rpm/suse/htmldoc&distro=SUSE%20Package%20Hub%2012%20SP1pkg:rpm/suse/htmldoc&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/htmldoc&distro=SUSE%20Package%20Hub%2015%20SP2pkg:rpm/suse/htmldoc&distro=Subscription%20Management%20Tool%2011%20SP3
< 1.9.12-lp152.4.3.1+ 5 more
- (no CPE)range: < 1.9.12-lp152.4.3.1
- (no CPE)range: < 1.9.12-1.2
- (no CPE)range: < 1.8.28-6.1
- (no CPE)range: < 1.9.12-bp151.4.3.1
- (no CPE)range: < 1.9.12-bp152.4.3.1
- (no CPE)range: < 1.8.27-170.4.9.1
Patches
Vulnerability mechanics
References
3- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- github.com/michaelrsweet/htmldoc/issues/423nvdExploitIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/07/msg00000.htmlnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.