CVE-2021-3657
A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.15 | isync | 1.4.4-r0 |
| alpine 3.16 | isync | 1.4.4-r0 |
| alpine 3.17 | isync | 1.4.4-r0 |
| alpine 3.18 | isync | 1.4.4-r0 |
| alpine 3.19 | isync | 1.4.4-r0 |
| alpine 3.20 | isync | 1.4.4-r0 |
| alpine 3.21 | isync | 1.4.4-r0 |
| alpine 3.22 | isync | 1.4.4-r0 |
| alpine 3.23 | isync | 1.4.4-r0 |
| alpine 3.24 | isync | 1.4.4-r0 |
| alpine edge | isync | 1.4.4-r0 |
| debian 10 | isync | 1.3.0-2.2~deb10u2 |
Alle 27 Einträge aus 27 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.15 | isync | 1.4.4-r0 |
| alpine 3.16 | isync | 1.4.4-r0 |
| alpine 3.17 | isync | 1.4.4-r0 |
| alpine 3.18 | isync | 1.4.4-r0 |
| alpine 3.19 | isync | 1.4.4-r0 |
| alpine 3.20 | isync | 1.4.4-r0 |
| alpine 3.21 | isync | 1.4.4-r0 |
| alpine 3.22 | isync | 1.4.4-r0 |
| alpine 3.23 | isync | 1.4.4-r0 |
| alpine 3.24 | isync | 1.4.4-r0 |
| alpine edge | isync | 1.4.4-r0 |
| debian 10 | isync | 1.3.0-2.2~deb10u2 |
| debian 11 | isync | 1.3.0-2.2+deb11u1 |
| debian 12 | isync | 1.4.4-1 |
| debian 13 | isync | 1.4.4-1 |
| debian 14 | isync | 1.4.4-1 |
| debian 9 | isync | 1.2.1-2+deb9u1 |
| echo | isync | 1.4.4-1 |
| rapidfort ubuntu 20.04 | isync | kein Fix angegeben |
| rapidfort ubuntu 22.04 | isync | kein Fix angegeben |
| rapidfort ubuntu 24.04 | isync | kein Fix angegeben |
| ubuntu 18.04-ESM | isync | kein Fix angegeben |
| ubuntu 20.04-ESM | isync | kein Fix angegeben |
| ubuntu 22.04 | isync | kein Fix angegeben |
| ubuntu 24.04 | isync | kein Fix angegeben |
| ubuntu 26.04 | isync | kein Fix angegeben |
| ubuntu 26.10 | isync | kein Fix angegeben |