Unscored CVE-2017-8825 EUVD-2017-17768GHSA-rrh2-wgj3-x946

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. …

Published May 8, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: libetpan Package: libetpan Ecosystem: Debian Ecosystem: Ubuntu

Description

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libetpan	1.6-3	—
Debian 13	libetpan	1.6-3	—
Debian 12	libetpan	1.6-3	—

Ubuntu