Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gq8r-4g7c-69vw

Опубликовано: 19 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.

EPSS

Процентиль: 91%
0.06799
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 4 года назад

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.

CVSS3: 9.8
nvd
почти 4 года назад

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.

CVSS3: 9.8
debian
почти 4 года назад

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate ...

EPSS

Процентиль: 91%
0.06799
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119