Summary
It was discovered that the fetchmail SMTP client incorrectly handled
certain status code messages. An attacker controlling a malicious server
could possibly use this issue to cause fetchmail to crash, resulting in a
denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | fetchmail | 6.4.27-1ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | fetchmail | 6.4.38-1ubuntu4.1 |
Vulnerabilities 1
-
Medium 5.9
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malforme…
References
-
report
https://ubuntu.com/security/CVE-2025-61962