Ubuntu fixes Fetchmail denial-of-service flaws in USN-9013-1
Two named issues can crash Fetchmail on Ubuntu 16.04, 18.04 and 20.04 LTS; the notice snippet cuts off a third finding.
28
CVE-2021-36386
- CVSS 3.1
- 7.5 high
- EPSS
- 3%p84
- Published
- ·
- Modified
Description · NVD
report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.
- Vendors
- fetchmailfedoraproject
- Products
- fetchmail, fedora
- Weakness
- CWE-909
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H