Lucene search
Veracode Vulnerability DatabaseVERACODE:31437HistoryJul 30, 2021 - 5:40 a.m.
Denial Of Service(DoS)
2021-07-3005:40:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.005
Percentile
76.8%
Fetchmail is vulnerable to denial of service. report_vbuild in report.c sometimes omits initialization of the vsnprintf va_list argument, allowing mail servers to cause a denial of service or possibly have unspecified other impact via long error messages.
References
www.openwall.com/lists/oss-security/2021/07/28/5
www.openwall.com/lists/oss-security/2021/08/09/1
lists.fedoraproject.org/archives/list/[email protected]/message/AGYO5AHSXTCKA4NQC2Z4H3XMMYNAGC77/
lists.fedoraproject.org/archives/list/[email protected]/message/OIXKO6QW3AUHGJVWKJXBCOVBYJUJRBFC/
security-tracker.debian.org/tracker/CVE-2021-36386
www.fetchmail.info/fetchmail-SA-2021-01.txt
www.fetchmail.info/security.html
Related
cvelist
cvelist
CVE-2021-36386
2021-07-29 13:59:24
openvas
openvas
openSUSE: Security Advisory for fetchmail (openSUSE-SU-2021:2791-1)
2021-08-21 00:00:00
Fedora: Security Advisory for fetchmail (FEDORA-2021-47893f53ed)
2021-08-13 00:00:00
Mageia: Security Advisory (MGASA-2021-0391)
2022-01-28 00:00:00
suse
suse
Security update for fetchmail (moderate)
2021-08-23 00:00:00
Security update for fetchmail (moderate)
2021-08-20 00:00:00
Security update for fetchmail (moderate)
2021-12-17 00:00:00
nessus
nessus
openSUSE 15 Security Update : fetchmail (openSUSE-SU-2021:1183-1)
2021-08-24 00:00:00
SUSE SLES12 Security Update : fetchmail (SUSE-SU-2021:2771-1)
2021-08-19 00:00:00
openSUSE 15 Security Update : fetchmail (openSUSE-SU-2021:2791-1)
2021-08-21 00:00:00
osv
osv
CVE-2021-36386
2021-07-30 14:15:18
Moderate: fetchmail security update
2022-05-10 06:41:48
Moderate: fetchmail security update
2022-05-10 06:41:48
nvd
nvd
CVE-2021-36386
2021-07-30 14:15:18
fedora
fedora
[SECURITY] Fedora 34 Update: fetchmail-6.4.20-1.fc34
2021-08-12 01:06:43
[SECURITY] Fedora 33 Update: fetchmail-6.4.20-1.fc33
2021-08-12 01:26:35
mageia
mageia
Updated fetchmail packages fix security vulnerability
2021-08-06 12:33:48
prion
prion
Design/Logic Flaw
2021-07-30 14:15:00
cbl_mariner
cbl_mariner
CVE-2021-36386 affecting package fetchmail for versions less than 6.4.22-1
2023-09-28 11:57:58
debiancve
debiancve
CVE-2021-36386
2021-07-30 14:15:18
alpinelinux
alpinelinux
CVE-2021-36386
2021-07-30 14:15:18
redos
redos
ROS-20240723-04
2024-07-23 00:00:00
cve
cve
CVE-2021-36386
2021-07-30 14:15:18
ubuntucve
ubuntucve
CVE-2021-36386
2021-07-30 00:00:00
almalinux
almalinux
Moderate: fetchmail security update
2022-05-10 06:41:48
redhatcve
redhatcve
CVE-2021-36386
2021-07-29 16:20:37
oraclelinux
oraclelinux
fetchmail security update
2022-05-17 00:00:00
freebsd
freebsd
fetchmail -- 6.4.19 and older denial of service or information disclosure
2021-07-07 00:00:00
redhat
redhat
(RHSA-2022:1964) Moderate: fetchmail security update
2022-05-10 06:41:48
rocky
rocky
fetchmail security update
2022-05-10 06:41:48
gentoo
gentoo
Fetchmail: Multiple Vulnerabilities
2022-09-25 00:00:00