CVE-2008-5514

描述

Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.

如何修補 CVE-2008-5514

要修補 CVE-2008-5514,請將受影響套件升級到下列已修補版本。

• Debian/alpine—升級至 2.02-3.1 或更新版本
• Debian/uw-imap—升級至 2007b~dfsg-1.1 或更新版本

CVE-2008-5514 正在被利用嗎?

低 — EPSS 為 1.8%,目前沒有觀察到大規模利用活動。

受影響套件(2)

• from 0, < 2.02-3.1
• from 0, < 2007b~dfsg-1.1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2008-5514