Read the docs
TI-2014-00448 Aliases CVE-2014-0469GHSA-6wm5-67q3-5f94

Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9…

Priority LOW 36CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.

Why it matters now

EPSS 0.03429 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:a:debian:xbuffy:*:*:*:*:*:*:*:*up to 3.3.bl.3.dfsg-8VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.2.1-1:*:*:*:*:*:*:*3.2.1-1VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.2.1-2:*:*:*:*:*:*:*3.2.1-2VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.2.1-3:*:*:*:*:*:*:*3.2.1-3VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.2.1-4:*:*:*:*:*:*:*3.2.1-4VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3-1:*:*:*:*:*:*:*3.3-1VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.b1.3-4:*:*:*:*:*:*:*3.3.b1.3-4VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.2-1:*:*:*:*:*:*:*3.3.bl.2-1VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-1:*:*:*:*:*:*:*3.3.bl.3-1VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-2:*:*:*:*:*:*:*3.3.bl.3-2VulnerableDebian
  • cpe:2.3:a:debian:xbuffy:*:*:*:*:*:*:*:* Versions up to 3.3.bl.3.dfsg-8 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.2.1-1:*:*:*:*:*:*:* Versions 3.2.1-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.2.1-2:*:*:*:*:*:*:* Versions 3.2.1-2 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.2.1-3:*:*:*:*:*:*:* Versions 3.2.1-3 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.2.1-4:*:*:*:*:*:*:* Versions 3.2.1-4 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3-1:*:*:*:*:*:*:* Versions 3.3-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.b1.3-4:*:*:*:*:*:*:* Versions 3.3.b1.3-4 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.2-1:*:*:*:*:*:*:* Versions 3.3.bl.2-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-1:*:*:*:*:*:*:* Versions 3.3.bl.3-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-2:*:*:*:*:*:*:* Versions 3.3.bl.3-2 Vulnerable ·Debian
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:debian:xbuffy:3.3.bl.3-3:*:*:*:*:*:*:*3.3.bl.3-3VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-5:*:*:*:*:*:*:*3.3.bl.3-5VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-6:*:*:*:*:*:*:*3.3.bl.3-6VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-7:*:*:*:*:*:*:*3.3.bl.3-7VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-8:*:*:*:*:*:*:*3.3.bl.3-8VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-9:*:*:*:*:*:*:*3.3.bl.3-9VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-10:*:*:*:*:*:*:*3.3.bl.3-10VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-11:*:*:*:*:*:*:*3.3.bl.3-11VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-12:*:*:*:*:*:*:*3.3.bl.3-12VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-13:*:*:*:*:*:*:*3.3.bl.3-13VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-14:*:*:*:*:*:*:*3.3.bl.3-14VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-15:*:*:*:*:*:*:*3.3.bl.3-15VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-16:*:*:*:*:*:*:*3.3.bl.3-16VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-17:*:*:*:*:*:*:*3.3.bl.3-17VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-18:*:*:*:*:*:*:*3.3.bl.3-18VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-19:*:*:*:*:*:*:*3.3.bl.3-19VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-20:*:*:*:*:*:*:*3.3.bl.3-20VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-21:*:*:*:*:*:*:*3.3.bl.3-21VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-22:*:*:*:*:*:*:*3.3.bl.3-22VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-23:*:*:*:*:*:*:*3.3.bl.3-23VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-24:*:*:*:*:*:*:*3.3.bl.3-24VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3-25:*:*:*:*:*:*:*3.3.bl.3-25VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-1:*:*:*:*:*:*:*3.3.bl.3.dfsg-1VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-2:*:*:*:*:*:*:*3.3.bl.3.dfsg-2VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-3:*:*:*:*:*:*:*3.3.bl.3.dfsg-3VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-4:*:*:*:*:*:*:*3.3.bl.3.dfsg-4VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-5:*:*:*:*:*:*:*3.3.bl.3.dfsg-5VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-6:*:*:*:*:*:*:*3.3.bl.3.dfsg-6VulnerableDebian
cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-7:*:*:*:*:*:*:*3.3.bl.3.dfsg-7VulnerableDebian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-3:*:*:*:*:*:*:* Versions 3.3.bl.3-3 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-5:*:*:*:*:*:*:* Versions 3.3.bl.3-5 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-6:*:*:*:*:*:*:* Versions 3.3.bl.3-6 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-7:*:*:*:*:*:*:* Versions 3.3.bl.3-7 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-8:*:*:*:*:*:*:* Versions 3.3.bl.3-8 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-9:*:*:*:*:*:*:* Versions 3.3.bl.3-9 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-10:*:*:*:*:*:*:* Versions 3.3.bl.3-10 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-11:*:*:*:*:*:*:* Versions 3.3.bl.3-11 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-12:*:*:*:*:*:*:* Versions 3.3.bl.3-12 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-13:*:*:*:*:*:*:* Versions 3.3.bl.3-13 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-14:*:*:*:*:*:*:* Versions 3.3.bl.3-14 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-15:*:*:*:*:*:*:* Versions 3.3.bl.3-15 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-16:*:*:*:*:*:*:* Versions 3.3.bl.3-16 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-17:*:*:*:*:*:*:* Versions 3.3.bl.3-17 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-18:*:*:*:*:*:*:* Versions 3.3.bl.3-18 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-19:*:*:*:*:*:*:* Versions 3.3.bl.3-19 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-20:*:*:*:*:*:*:* Versions 3.3.bl.3-20 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-21:*:*:*:*:*:*:* Versions 3.3.bl.3-21 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-22:*:*:*:*:*:*:* Versions 3.3.bl.3-22 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-23:*:*:*:*:*:*:* Versions 3.3.bl.3-23 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-24:*:*:*:*:*:*:* Versions 3.3.bl.3-24 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3-25:*:*:*:*:*:*:* Versions 3.3.bl.3-25 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-1:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-2:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-2 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-3:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-3 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-4:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-4 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-5:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-5 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-6:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-6 Vulnerable ·Debian
  • cpe:2.3:a:debian:xbuffy:3.3.bl.3.dfsg-7:*:*:*:*:*:*:* Versions 3.3.bl.3.dfsg-7 Vulnerable ·Debian

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0469
  2. 2026-10-03 Alias added: GHSA-6wm5-67q3-5f94

References

Advisory 1

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences