smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade uw-imap | Jul 30, 2024 | Nov 10, 2008 |
| Gentoo Linux | — | Upgrade net-mail/uw-imap.Upgrade net-libs/c-client. | Oct 30, 2017 | Nov 10, 2008 |
| Suse | — | Upgrade imap-libUpgrade imap-develUpgrade imap | Feb 17, 2015 | Nov 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub