CVE-2017-8825

HIGH 7.5CVE-2017-8825 · Published 08/05/2017 · updated 17/06/2026

In short

CVE-2017-8825 is a HIGH (CVSS 7.5) vulnerability affecting libetpan (libetpan project).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libetpan libetpan_project	`≤ 1.7.2`	No fix yet

Description

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses.

References

dinhviethoa/libetpan commit 1fe8fbc · Patch
dinhviethoa/libetpan · Third Party Advisory
dinhviethoa/libetpan release 1.8 · Release Notes

More vulnerabilities in libetpan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free