EUVD-2025-32416

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

DEBIAN-CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

AZL-68183 CVE-2025-61962 affecting package fetchmail 6.4.22-1

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

AZL-68127 CVE-2025-61962 affecting package fetchmail 6.4.39-2

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

UBUNTU-CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

PT-2025-40622

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 6.5.6 Description The SMTP client in fetchmail can experience a crash during authentication when it receives a 334 status code in a malformed context. Recommendations Update to fetchmail version 6.5.6 or later...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash during authentication when a 334 status code is received in a malformed context. This issue is documented across multiple sources (CVE record and various security advisories) and has been addressed in newer releases: advisories indicate updates...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

Fetchmail 安全漏洞

Fetchmail is a downloadable email application. A security vulnerability exists in Fetchmail versions prior to 6.5.6, which stems from an SMTP client authenticating when receiving a 334 status code in a malformed environment, which could lead to a crash...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

CVE-2025-61962: Improper Neutralization of Value Delimiters

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/fetchmail-6.4.27-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: fetchmail SMTP client can crash when...

FreeBSD : fetchmail -- potential crash when authenticating to SMTP server (21fba35e-a05f-11f0-a8b8-a1ef31191bc1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 21fba35e-a05f-11f0-a8b8-a1ef31191bc1 advisory. Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a...

Slackware Linux 15.0 / current fetchmail Vulnerability (SSA:2025-276-01)

The version of fetchmail installed on the remote host is prior to 6.4.27 / 6.5.6. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-276-01 advisory. New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the...

fetchmail -- potential crash when authenticating to SMTP server

Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a protocol violation where, when a trusted but malicious or malfunctioning SMTP server responds to an authentication request with a "334" code but without a following blank on the line, it will...

Linux Distros Unpatched Vulnerability : CVE-2021-36386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow mail servers to cause a...