report_vbuild in report.c in... CVE-2021-36386

5.0 AV AC AU C I A
发布: 2021-07-30
修订: 2024-11-21

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.

0%
暂无可用Exp或PoC
当前有3条受影响产品信息