Vulnerability Details CVE-2016-10937
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00002.html
- https://bugs.debian.org/939702
- https://github.com/lefcha/imapfilter/issues/142
- https://lists.debian.org/debian-lts-announce/2019/10/msg00040.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBNDFMAIUA6PQMV2P6OKIP7JZQEWX7D2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQUH2TOCNEST7JB2RJVVJT3RZS5XZCFZ/
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00002.html
- https://bugs.debian.org/939702
- https://github.com/lefcha/imapfilter/issues/142
- https://lists.debian.org/debian-lts-announce/2019/10/msg00040.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBNDFMAIUA6PQMV2P6OKIP7JZQEWX7D2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQUH2TOCNEST7JB2RJVVJT3RZS5XZCFZ/
Products affected by CVE-2016-10937
-
cpe:2.3:a:imapfilter_project:imapfilter:-
-
cpe:2.3:a:imapfilter_project:imapfilter:2.2.3
-
cpe:2.3:a:imapfilter_project:imapfilter:2.3
-
cpe:2.3:a:imapfilter_project:imapfilter:2.4
-
cpe:2.3:a:imapfilter_project:imapfilter:2.4.1
-
cpe:2.3:a:imapfilter_project:imapfilter:2.4.2
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.1
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.2
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.3
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.4
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.5
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.6
-
cpe:2.3:a:imapfilter_project:imapfilter:2.5.7
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.1
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.10
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.11
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.12
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.2
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.3
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.4
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.5
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.6
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.7
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.8
-
cpe:2.3:a:imapfilter_project:imapfilter:2.6.9
-
cpe:2.3:a:opensuse:backports_sle:15.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:fedoraproject:fedora:30
-
cpe:2.3:o:fedoraproject:fedora:31
-
cpe:2.3:o:opensuse:leap:15.1