VDB
DEBIAN-CVE-2021-39272
DEBIAN-CVE-2021-39272
PUBLISHED
CVSS 5.900000095367432 MEDIUM
Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | fetchmail | 0, 0, 0 |
| Debian:11 | fetchmail | 6.4.32-1, 6.6.2-3, 6.4.22-1 |
| Debian:14 | fetchmail | 0, 0, 0 |
| Debian:13 | fetchmail | 0, 0, 0 |
Timeline
- Aug 30, 2021 CVE Published
- Apr 28, 2026 CVE Updated