| Package | Affected versions | Patched versions |
|---|---|---|
| fetchmail | = 4.5.1= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.6.7= 4.6.8= 4.6.9= 4.7.0= 4.7.1= 4.7.2= 4.7.3= 4.7.4= 4.7.5= 4.7.6= 4.7.7= 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.1.0= 5.1.4= 5.2.0= 5.2.1= 5.2.3= 5.2.4= 5.2.7= 5.2.8= 5.3.0= 5.3.1= 5.3.3= 5.3.8= 5.4.0= 5.4.3= 5.4.4= 5.4.5= 5.5.0= 5.5.2= 5.5.3= 5.5.5= 5.5.6= 5.6.0= 5.7.0= 5.7.2= 5.7.4= 5.8= 5.8.1= 5.8.11= 5.8.13= 5.8.14= 5.8.17= 5.8.2= 5.8.3= 5.8.4= 5.8.5= 5.8.6= 5.9.0= 5.9.10= 5.9.11= 5.9.13= 5.9.4= 5.9.5= 5.9.8= 6.0.0= 6.1.0= 6.1.3= 6.2.0= 6.2.1= 6.2.2= 6.2.3= 6.2.4= 6.2.5= 6.2.5.1= 6.2.5.2= 6.2.5.4= 6.2.6= 6.2.9= 6.3.0= 6.3.1= 6.3.2= 6.3.3= 6.3.4= 6.3.5= 6.3.6= 6.3.7≤ 6.3.8 |
fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free