| Package | Affected versions | Patched versions |
|---|---|---|
| fetchmail | = 5.9.10= 5.9.11= 5.9.13= 5.9.9= 6.0.0= 6.1.0= 6.1.3= 6.2.0= 6.2.1= 6.2.2= 6.2.3= 6.2.4= 6.2.5= 6.2.5.1= 6.2.5.2= 6.2.5.4= 6.2.6= 6.2.9= 6.3.0= 6.3.1= 6.3.10= 6.3.11= 6.3.12= 6.3.13= 6.3.14= 6.3.15= 6.3.16= 6.3.17= 6.3.18= 6.3.19= 6.3.2= 6.3.3= 6.3.4= 6.3.5= 6.3.6= 6.3.7= 6.3.8= 6.3.9 |
fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free