Описание
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| claws-mail | fixed | 3.17.7-1 | package | |
| claws-mail | no-dsa | buster | package | |
| claws-mail | no-dsa | stretch | package |
Примечания
https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4313
EPSS
Связанные уязвимости
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
ALT-PU-2020-2897: package `claws-mail` update to version 3.17.7-alt1
EPSS