Описание
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.17.6 (включая)
cpe:2.3:a:claws-mail:claws-mail:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
EPSS
Процентиль: 65%
0.00485
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-674
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 5 лет назад
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
CVSS3: 7.5
debian
больше 5 лет назад
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious ...
github
больше 3 лет назад
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
EPSS
Процентиль: 65%
0.00485
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-674