Description
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | balsa | 2.3.20-1 | — |
| Debian 13 | balsa | 2.3.20-1 | — |
| Debian 12 | balsa | 2.3.20-1 | — |
References
- http://bugs.gentoo.org/show_bug.cgi?id=193179
- https://bugzilla.redhat.com/show_bug.cgi?id=297581
- SUSE-SR:2007:019 vendor-advisory
- 25777 vdb-entry
- http://bugzilla.gnome.org/show_bug.cgi?id=474366
- 26987 third-party-advisory
- [ANNOUNCE] 20070907 balsa-2.3.20 released mailing-list
- ADV-2007-3263 vdb-entry
- 27272 third-party-advisory
- 40585 vdb-entry
- GLSA-200710-17 vendor-advisory
- 26947 third-party-advisory