Cloudanix VulnDB

CVE-2005-1513

Critical · 9.8

CVSS

9.8

EPSS

10.8%

Published

May 11, 2005

CISA due date

—

The record

Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 netqmail 0 1.06-6.2~deb10u1
Debian:8 netqmail 0 1.06-6.2~deb8u1
Debian:9 netqmail 0 1.06-6.2~deb9u1
Ubuntu:16.04:LTS netqmail 0 1.06-6.2~deb10u1build0.16.04.1
Ubuntu:18.04:LTS netqmail 0 1.06-6.2~deb10u1build0.18.04.1
Ubuntu:20.04:LTS netqmail 0 1.06-6.2~deb10u1build0.20.04.1
Ubuntu:Pro:14.04:LTS netqmail 0 1.06-6.2~deb10u1build0.14.04.1+esm1

Related vulnerabilities