Red Hat Security AdvisoryRHSA-2022:1964
fetchmail security update
Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) fetchmail-6.4.24-1.el8
Fixes 2 records
Priority LOW 38
report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0256 · Published 2021-07-29 · Partial fix CWE-909
Priority LOW 28
Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00925 · Published 2021-08-30 · Partial fix CWE-319
