p PatchFirst

CVE-2010-0562

CVE-2010-0562

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping.

EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • fetchmail Debian:12

    Affected ranges
    • ECOSYSTEM: < 6.3.13-2

    Update to 6.3.13-2

  • fetchmail Debian:13

    Affected ranges
    • ECOSYSTEM: < 6.3.13-2

    Update to 6.3.13-2

  • fetchmail Debian:14

    Affected ranges
    • ECOSYSTEM: < 6.3.13-2

    Update to 6.3.13-2

Original sources

Check your server →