Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia: 2020-0391 Moderate: Claws Mail Stack Consumption Issue

mageia
Calendar Grey October 21, 2020
Dist Mageia Esm H88
Revised claw-mail updates resolve a severe security vulnerability in Mageia's POP3 features, as of 21 Oct 2020.
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild ...

Summary

In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree (CVE-2020-16094).

References

- https://bugs.mageia.org/show_bug.cgi?id=27427

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JUBLHUG2UCXVABAGN5FVTD3AB3YKE5NN/

- https://www.cve.org/CVERecord?id=CVE-2020-16094

Topics%20covered

Topics Covered

security advisory update malicious server claws mail mageia stack consumption recursive issue

Resolution

SRPMS

- 7/core/claws-mail-3.17.7-1.mga7

Publication date: 21 Oct 2020
URL: https://advisories.mageia.org/MGASA-2020-0391.html
Type: security
CVE: CVE-2020-16094

Topics%20covered

Topics Covered

security advisory update malicious server claws mail mageia stack consumption recursive issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here