CVE-2026-15340
CVE-2026-15340 · Savannah lwIP SMTP client Classic Buffer Overflow
This page contains facts from public vulnerability sources. Check the original advisory before updating.
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
CVSS 9.3 · Critical · EPSS 0.6%
- Published
- Updated
Stack: system
Affected products and versions
lwip smtp client
- Versions
- 2.2.1: Affected
- patch_125_smtp_txbuf.diff: Not affected
- git commit (614420f82c8729d070e01464c0dddb3c9525c772): Not affected
No fix published
lwip Debian:12
- Versions
- 2.1.3+dfsg1-2
- 2.1.3+dfsg1-3
- 2.1.3+dfsg1-4
- 2.2.0+dfsg1-1
- 2.2.0+dfsg1-2
- 2.2.0+dfsg1-3
- 2.2.0+dfsg1-4
- 2.2.0+dfsg1-5
- 2.2.0+dfsg1-6
- 2.2.0+dfsg1-6.1
- 2.2.0+dfsg1-6.1~exp1
- 2.2.0+dfsg1-7
- 2.2.0+dfsg1-8
- 2.2.0+dfsg1-9
- 2.2.1+dfsg1-1
- 2.2.1+dfsg1-2
- 2.2.1+dfsg1-3
- 2.2.1+dfsg1-4
- 2.2.1+dfsg1-5
- 2.2.1+dfsg1-6
- 2.2.1+dfsg1-7
- 2.2.1+dfsg1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
lwip Debian:13
- Versions
- 2.2.1+dfsg1-1
- 2.2.1+dfsg1-1+deb13u1
- 2.2.1+dfsg1-2
- 2.2.1+dfsg1-3
- 2.2.1+dfsg1-4
- 2.2.1+dfsg1-5
- 2.2.1+dfsg1-6
- 2.2.1+dfsg1-7
- 2.2.1+dfsg1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
lwip Debian:14
- Versions
- 2.2.1+dfsg1-1
- 2.2.1+dfsg1-2
- 2.2.1+dfsg1-3
- 2.2.1+dfsg1-4
- 2.2.1+dfsg1-5
- 2.2.1+dfsg1-6
- 2.2.1+dfsg1-7
- 2.2.1+dfsg1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published