PT-2017-18558 · Libetpan+3 · Libetpan+3

Perry E. Metzger · Publicado 2017-05-08 · Atualizado 2017-06-28 · CVE-2017-8825

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LibEtPan versions prior to 1.8 MailCore versions prior to 1.8 MailCore 2 versions prior to 1.8

Description A null dereference issue has been found in the MIME handling component, which can cause a crash during the parsing of a Cc header containing multiple e-mail addresses in the low-level/imf/mailimf.c file.

Recommendations For LibEtPan versions prior to 1.8, update to version 1.8 or later to resolve the issue. For MailCore versions prior to 1.8, update to version 1.8 or later to resolve the issue. For MailCore 2 versions prior to 1.8, update to version 1.8 or later to resolve the issue.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2017-1756

CVE-2017-8825

MGASA-2017-0191

OPENSUSE-SU-2024:10938-1

Produtos afetados

Alt Linux

Libetpan

Mailcore

Mailcore 2

Referências · 17

• https://github.com/dinhviethoa/libetpan/issues/274 · Nota
• https://github.com/dinhviethoa/libetpan/releases/tag/1.8 · Nota
• https://github.com/dinhviethoa/libetpan/commit/1fe8fbc032ccda1db9af66d93016b49c16c1f22d · Correção
• https://cve.org/CVERecord?id=CVE-2017-8825 · Nota de Segurança
• http://openwall.com/lists/oss-security/2017/05/08/6 · Nota
• https://advisories.mageia.org/MGASA-2017-0191.html · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2017-1756 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8825 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2017-8825 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-8825 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-8825 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0191 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8825 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2017-8825 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-8825 · Aviso do Fabricante