Vulnerability in Fetchmail

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

  • Fetchmail — versions 4.5.1, 4.5.2, 4.5.3
  • N/a — versions n/a

References