CVE-2017-8825

NameCVE-2017-8825
DescriptionA null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs862151

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libetpan (PTS)buster1.9.3-2+deb10u1fixed
buster (security)1.9.3-2+deb10u3fixed
bullseye1.9.4-3fixed
trixie, bookworm1.9.4-3.1fixed
sid1.9.4-3.2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libetpansource(unstable)1.6-3862151

Notes

[jessie] - libetpan <no-dsa> (Minor issue)
[wheezy] - libetpan <no-dsa> (Minor issue)
https://github.com/dinhviethoa/libetpan/commit/1fe8fbc032ccda1db9af66d93016b49c16c1f22d
https://github.com/dinhviethoa/libetpan/issues/274

Search for package or bug name: Reporting problems