mbsync project mbsync vulnerabilities and exploits

(subscribe to this query)

A flaw was found in mbsync versions before 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivabl...

Isync Project Isync Fedoraproject Fedora 35 Redhat Enterprise Linux 7.0 Debian Debian Linux 9.0

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploi...

Isync Project Isync 1.4.1 Isync Project Isync 1.4.0 Isync Project Isync Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0

A flaw was found in mbsync in isync 1.4.0 up to and including 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message that lacks headers (i.e., one that starts with an empty line) to provoke a heap overflow, which could concei...

Isync Project Isync Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the des...

Mbsync Project Mbsync Debian Debian Linux 9.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Extra Packages For Enterprise Linux 8.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook