88 matches found
Medium: fetchmail
Issue Overview: In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context. CVE-2025-61962 Affected Packages: fetchmail Issue Correction: Run dnf update fetchmail --releasever 2023.9.20251208 or dnf update --advisory...
CLSA-2025-1764679337 iperf3: Fix of 2 CVEs
CVE-2025-54349: fix off-by-one error and heap-based buffer overflow in iperfauth.c - CVE-2025-54350: prevent crash due to assertion failures on malformed authentication attempt in iperfauth.c...
OESA-2025-2423 fetchmail security update
Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...
SUSE CVE-2025-61962
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
EUVD-2019-2485
Malware in sbrugna...
EUVD-2025-32416
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
AZL-68127 CVE-2025-61962 affecting package fetchmail 6.4.39-2
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
UBUNTU-CVE-2025-61962
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
PT-2025-40622
Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 6.5.6 Description The SMTP client in fetchmail can experience a crash during authentication when it receives a 334 status code in a malformed context. Recommendations Update to fetchmail version 6.5.6 or later...
CVE-2025-61962
In fetchmail before 6.5.6, the SMTP client can crash during authentication when a 334 status code is received in a malformed context. This issue is documented across multiple sources (CVE record and various security advisories) and has been addressed in newer releases: advisories indicate updates...
CVE-2025-61962
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
CVE-2025-61962
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
[slackware-security] fetchmail
New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/fetchmail-6.4.27-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: fetchmail SMTP client can crash when...
dovecot: Fix of CVE-2020-12674
CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...
Linux Distros Unpatched Vulnerability : CVE-2017-15132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processe...
OESA-2024-1213 firefox security update
Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the...
OESA-2024-1212 firefox security update
Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the...
SUSE CVE-2017-5419
If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service DOS attack. This vulnerability affects Firefox 52 and Thunderbird 52...
SUSE CVE-2019-10691
The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username...