Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 7: Advisory 2021-0078 Moderate: Email MIME Memory Exhaustion DoS

mageia
Calendar Grey February 10, 2021
Dist Mageia Esm H88
This critical patch resolves memory depletion vulnerabilities in Mageia's Mail software and restricts excessive nested MIME components.
Messages with too many tiny nested MIME parts can lead to memory exhaustion on split(), resulting in denial of service (rhbz#1835353) This update limits the number of nested MIME ...

Summary

Messages with too many tiny nested MIME parts can lead to memory exhaustion on split(), resulting in denial of service (rhbz#1835353) This update limits the number of nested MIME parts to 10 (by default), to avoid a possible memory exhaustion issue with lots of tiny MIME parts.

References

- https://bugs.mageia.org/show_bug.cgi?id=26757

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VJFUIVJOQGZOYF4Q4RXPBJTBBZD5LXVK/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3PWODHVD5ZKQBY2OYBTFPBETUOOJA33D/

Topics%20covered

Topics Covered

security advisory moderate denial of service security update DoS perl memory exhaustion email Mageia email package perl packages

Resolution

SRPMS

- 7/core/perl-Email-MIME-1.949.0-3.1.mga7

- 7/core/perl-Email-MIME-ContentType-1.24.0-3.1.mga7

Publication date: 10 Feb 2021
URL: https://advisories.mageia.org/MGASA-2021-0078.html
Type: security

Topics%20covered

Topics Covered

security advisory moderate denial of service security update DoS perl memory exhaustion email Mageia email package perl packages

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here