https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:22:49 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:1964 <p><strong>Affected:</strong> AlmaLinux:8: fetchmail</p> <p>Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.</p> <p>Security Fix(es):</p> <p>* fetchmail: DoS or information disclosure when logging long messages (CVE-2021-36386)</p> <p>* fetchmail: STARTTLS session encryption bypassing (CVE-2021-39272)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: fetchmail</p> <p>Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.</p> <p>Security Fix(es):</p> <p>* fetchmail: DoS or information disclosure when logging long messages (CVE-2021-36386)</p> <p>* fetchmail: STARTTLS session encryption bypassing (CVE-2021-39272)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:1964 https://cve.radiocsirt.org/vuln/bdu:2021-03928 bdu:2021-03928 https://cve.radiocsirt.org/vuln/bdu:2021-03928 https://cve.radiocsirt.org/vuln/cleanstart-2024-yi47904 <p><strong>Affected:</strong> CleanStart: fetchmail</p> <p>Security vulnerability affects the fetchmail package. report_vbuild in report.</p> <p><strong>Affected:</strong> CleanStart: fetchmail</p> <p>Security vulnerability affects the fetchmail package. report_vbuild in report.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-yi47904 https://cve.radiocsirt.org/vuln/euvd-2026-29372 EUVD-2026-29372 https://cve.radiocsirt.org/vuln/euvd-2026-29372 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36386 <p>report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.</p> <p>report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36386 https://cve.radiocsirt.org/vuln/ghsa-rr6c-95pp-cpgf <p>report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.</p> <p>report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.</p> https://cve.radiocsirt.org/vuln/ghsa-rr6c-95pp-cpgf https://cve.radiocsirt.org/vuln/gsd-2021-36386 gsd-2021-36386 https://cve.radiocsirt.org/vuln/gsd-2021-36386 https://cve.radiocsirt.org/vuln/msrc_cve-2021-36386 msrc_CVE-2021-36386 https://cve.radiocsirt.org/vuln/msrc_cve-2021-36386 https://cve.radiocsirt.org/vuln/oesa-2021-1314 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: fetchmail, openEuler:20.03-LTS-SP2: fetchmail</p> <p>Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so you can read it through your favorite mail client. Install fetchmail if you need to retrieve mail over SLIP or PPP connections. Security Fix(es): report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.(CVE-2021-36386)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: fetchmail, openEuler:20.03-LTS-SP2: fetchmail</p> <p>Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so you can read it through your favorite mail client. Install fetchmail if you need to retrieve mail over SLIP or PPP connections. Security Fix(es): report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.(CVE-2021-36386)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1314 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1183-1 <p>Security update for fetchmail</p> <p>Security update for fetchmail</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1183-1 https://cve.radiocsirt.org/vuln/suse-su-2021:2771-1 <p>Security update for fetchmail</p> <p>Security update for fetchmail</p> https://cve.radiocsirt.org/vuln/suse-su-2021:2771-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36386 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fetchmail, Ubuntu:18.04:LTS: fetchmail, Ubuntu:20.04:LTS: fetchmail</p> <p>report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fetchmail, Ubuntu:18.04:LTS: fetchmail, Ubuntu:20.04:LTS: fetchmail</p> <p>report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36386 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1525 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in fetchmail ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in fetchmail ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1525