CVE-2015-8614

概要

参考情報

• git.claws-mail.org
• lists.opensuse.org/opensuse-updates/2016-01/msg00000.html
• claws-mail.org/news.php · Patch
• debian.org/security/2016/dsa-3452
• openwall.com/lists/oss-security/2015/12/21/10
• openwall.com/lists/oss-security/2015/12/22/2
• thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/201606-11 · Issue Tracking

claws-mail のその他の脆弱性

• CVE-2021-37746中 6.1textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks befo…
• CVE-2020-16094高 7.5In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursi…
• CVE-2020-15917緊急 9.8common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.
• CVE-2015-8708高 7.3Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified imp…
• CVE-2014-2576中 6.8plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it ea…