CVE-2026-67445 Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/smtpd/smtpd.go session.readLine using bufio.Reader.ReadString before session.parseLine parses the verb or the RFC 5321 512-octet command-line limit is enforced. An unauthenticate...

EUVD-2018-10660

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-18956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash...

Fedora 29 : suricata (2018-787ee605a5)

This update fixes a segfault in the SMTP parser. This bug is tracked as CVE-2018-18956. There are a number of other bugfixes and performance improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 27 : suricata (2018-d05860129f)

This update fixes a segfault in the SMTP parser. This bug is tracked as CVE-2018-18956. There are a number of other bugfixes and performance improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Design/Logic Flaw

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

CVE-2018-18956 affects Suricata 4.x prior to 4.0.6, where the ProcessMimeEntity function in util-decode-mime.c allows remote attackers to trigger a denial of service (segfault/daemon crash) via crafted SMTP input. The vulnerability was exploited in the wild in November 2018. Public sources in the...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...