CVE-2006-0321

Name	CVE-2006-0321
Description	fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	348747

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
fetchmail (PTS)	buster	6.4.0~beta4-3+deb10u1	fixed
	bullseye	6.4.16-4+deb11u1	fixed
	bookworm	6.4.37-1	fixed
	sid, trixie	6.4.38-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
fetchmail	source	woody	(not affected)
fetchmail	source	sarge	(not affected)
fetchmail	source	(unstable)	6.3.2-1	low	348747

Notes

[sarge] - fetchmail <not-affected> (regression in fetchmail 6.3.0 and 6.3.1)
[woody] - fetchmail <not-affected> (regression in fetchmail 6.3.0 and 6.3.1)