Description
The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ssmtp | 2.62-1.1 | — |
| Debian 13 | ssmtp | 2.62-1.1 | — |
| Debian 12 | ssmtp | 2.62-1.1 | — |
References
- ADV-2008-2597 vdb-entry
- https://bugs.gentoo.org/234391
- ssmtp-fromformat-information-disclosure(45038) vdb-entry
- [oss-security] 20080911 Re: ssmtp =2.62 unitialized memory disclosure mailing-list
- [oss-security] 20080909 Re: ssmtp =2.62 unitialized memory disclosure mailing-list
- [oss-security] 20080909 ssmtp =2.62 unitialized memory disclosure mailing-list
- 31094 vdb-entry