CVE-2020-15917

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00090.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-08/msg00002.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-08/msg00060.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-09/msg00051.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-11/msg00013.html · Broken Link
• git.claws-mail.org
• git.claws-mail.org
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YVQB7NRBHO67Q74RS7RZCMW4ENRVBB4
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G7UX65342HRVDQML4G4GEVEUB764EUM5

claws-mail のその他の脆弱性

• CVE-2021-37746中 6.1textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks befo…
• CVE-2020-16094高 7.5In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursi…
• CVE-2015-8708高 7.3Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified imp…
• CVE-2015-8614高 7.3Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws M…
• CVE-2014-2576中 6.8plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it ea…