QwikSec

Security Database

CVE

CWE

Training

CVE-2021-3657

Published: Feb 18, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.

Vendor	Product	Versions
n/a	isync	affected `isync 1.4.4`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2028932

x_refsource_MISC

https://www.openwall.com/lists/oss-security/2021/12/03/1

x_refsource_MISC

[debian-lts-announce] 20220701 [SECURITY] [DLA 3066-1] isync security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.