https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T12:46:40.992727+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2021-36386 CVE-2021-36386 2026-11-13T12:46:41.013017+00:00

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.

 https://db.gcve.eu/vuln/usn-9013-1 USN-9013-1 — fetchmail vulnerabilities 2026-11-13T12:46:41.013075+00:00

Affected: Ubuntu:Pro:16.04:LTS: fetchmail, Ubuntu:Pro:18.04:LTS: fetchmail, Ubuntu:Pro:20.04:LTS: fetchmail, Ubuntu:22.04:LTS: fetchmail, Ubuntu:24.04:LTS: fetchmail, Ubuntu:26.10: fetchmail, Ubuntu:26.04:LTS: fetchmail

Christian Herdtweck discovered that Fetchmail incorrectly handled certain long log messages. A remote attacker could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-36386)

It was discovered that the Fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-61962)

Tristan Madani discovered that Fetchmail incorrectly handled certain NTLM authentication challenges. A remote attacker could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (CVE-2026-94184)