CVE-2021-44143

Katalog CVE

CVSS 9.8 · Critical EPSS 3,8%

Kerentanan Out-of-bounds Write pada isync project isync, debian linux +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message that lacks headers (i.e., one that starts with an empty line) to provoke a heap overflow, which could conceivably be exploited for remote code execution.

Rincian

Terbit di NVD

22 November 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,8% peluang dieksploitasi; lebih tinggi dari 89,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sourceforge.net/p/isync/isync/commit_browser patch · advisory pihak ketiga
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=999804 advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-15 advisory pihak ketiga
• https://sourceforge.net/p/isync/isync/ref/master/tags/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/12/03/2 mailing list
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYZ2GNB4ZO2T2...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCBSY7OZ57XNC...