CVE-2017-8825

HIGH

libetpan < 1.7.2 - Denial of Service via MIME Cc Header Parsing

Title source: llm
STIX 2.1

Description

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_confirm
https://github.com/dinhviethoa/libetpan/issues/274
Release Notes, Third Party Advisory x_refsource_confirm
https://github.com/dinhviethoa/libetpan/releases/tag/1.8

Scores

CVSS v3 7.5
EPSS 0.0184
EPSS Percentile 76.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (1)
libetpan_project/libetpan < 1.7.2
Published May 08, 2017
Tracked Since Feb 18, 2026