← Back

Fetchmail

fetchmail

Vendor: Fetchmail • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Fetchmail
1Fetchmail
Apr 16, 2026
Dec 6, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.
1Fetchmail
1Fetchmail
Apr 16, 2026
Sep 6, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.
1Fetchmail
1Fetchmail
Apr 16, 2026
Aug 31, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to...Show more
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.Show less
1Fetchmail
1Fetchmail
Apr 16, 2026
Feb 12, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.