CVE-2026-20011

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

CVE-2026-20011 Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

EUVD-2026-107370

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

CVE-2026-20011

Multiple Cisco products are vulnerable to a Denial of Service (DoS) condition due to a flaw in the Snort 3 SMTP MIME Decoder . The root cause is a lack of error checking when parsing MIME fields within the SMTP header. An unauthenticated, remote attacker can exploit this by sending crafted SMTP p...

CVE-2026-20011 Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

Cisco FTD: CVE-2026-20011: Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

PT-2026-120679

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw exists in the Snort 3 SMTP MIME Decoder due to insufficient error checking during the parsing of MIME fields within the SMTP header. An unauthenticated remote attacker can explo...

Multiple Cisco Products Snort 3 SMTP MIME DoS (cisco-sa-snort3-mime-vulns-bkXjcKkt)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability stems from the lack of error checking in the Snort 3 SMTP MIME Decoder when parsing the SMTP header’s MIME field. As a result, unauthenticated remote attackers can send specially crafted SMTP packets over an...

CVE-2026-57228

A flaw was found in Suricata. A heap out-of-bounds read vulnerability exists in the SMTP MIME quoted-printable decoder. A remote attacker can send specially crafted SMTP traffic, causing a quoted-printable escape sequence to be split across traffic chunks. This can lead to a one-byte read past a...

SUSE CVE-2026-57228

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

CVE-2026-57228: Out-of-bounds Read

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues Update to version go1.26.5 bsc1255111. CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. CVE-2026-39822: os: Root escape via symlink plus trailing slash bsc1271014. CVE-2026-42504: mime: quadratic complexity in...

Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities

Multiple Cisco products are affected by vulnerabilities in the HTTP Multipurpose Internet Mail Extensions MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak possible sensitive information or to restart. For more information about these...

Multiple Cisco Products Snort 3 MIME DoS Vulnerabilities (cisco-sa-snort3-mime-vulns-tTL8PgVH_CVE-2025-20360)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerabilit...

suricata:fuzz_mimedecparseline: Crash with empty stacktrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6369060652974080 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzmimedecparseline Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000080f04...

suricata:fuzz_mimedecparseline: Segv on unknown address with empty stacktrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6521280988053504 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzmimedecparseline Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...

suricata:fuzz_mimedecparseline: Heap-buffer-overflow in DecodeBase64

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4598031521808384 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzmimedecparseline Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address...

Gaim contains an off-by-one buffer overflow vulnerability in the gaim_quotedp_decode() function

Overview There is an off-by-one buffer overflow vulnerability in the Gaim MIME decoder. Description Gaim is a multi-protocol instant messenger available for a number of operating systems. It includes a feature that requires Gaim to decode MIME-encoded data. There is an off-by-one buffer overflow...