Summary
[6.4.38-3.1]
- Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication
(fetchmail-SA-2026-01)
Resolves: RHEL-265187
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | fetchmail | 0:6.4.38-3.el10_2.1 |
Vulnerabilities 1
-
Medium 5.3
Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while b…