CVE-2020-16094: High severity mambo cms vulnerability
Published Jul 28, 2020
·Updated
In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
Affected Software
4 affected components
claws-mail claws-mail<=3.17.6
Fedoraproject Fedora=31
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Event History
Jul 28, 2020
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-16094?
CVE-2020-16094 has been classified with a high severity rating due to the potential for denial of service through stack consumption.
2
How do I fix CVE-2020-16094?
To mitigate CVE-2020-16094, update Claws Mail to version 3.17.7 or later, which addresses the vulnerability.
3
Which versions of Claws Mail are affected by CVE-2020-16094?
CVE-2020-16094 affects Claws Mail versions up to and including 3.17.6.
4
What types of systems are vulnerable to CVE-2020-16094?
CVE-2020-16094 affects Claws Mail on various Linux distributions, including Fedora 31, 32, and 33.
5
What causes CVE-2020-16094?
CVE-2020-16094 is caused by unchecked recursion into subdirectories during the rebuilding of the folder tree in Claws Mail.