CVE-2020-16094
Fixed in a distro release EPSS 2%
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
Products: claws-mail, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | claws-mail | 3.17.7-1 |
| Debian 13 | claws-mail | 3.17.7-1 |
| Debian 14 | claws-mail | 3.17.7-1 |
| Ubuntu 16.04 LTS | claws-mail | no fix |
| Ubuntu 18.04 LTS | claws-mail | no fix |
| Ubuntu 20.04 LTS | claws-mail | no fix |