Описание
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed Internet Message Access Protocol (IMAP) line. This could lead to an out-of-bounds buffer read, potentially resulting in information disclosure or a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | ||
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 10 | thunderbird | Fixed | RHSA-2026:73130 | 29.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird | Fixed | RHSA-2026:81392 | 12.10.2026 |
| Red Hat Enterprise Linux 8 | thunderbird | Fixed | RHSA-2026:73971 | 30.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A maliciously constructed IMAP line could cause an out-of-bounds buffe ...
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.
EPSS
6.1 Medium
CVSS3