CVE-2026-94184
Fixed in a distro release EPSS 1%CVSS 5.3
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.
Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | fetchmail | 6.4.38-3.el10_2.1 |
| AlmaLinux 8 | fetchmail | 6.4.24-1.el8_10.1 |
| AlmaLinux 9 | fetchmail | 6.4.24-1.el9_8.1 |
| Amazon Linux 2 | fetchmail | 6.3.24-7.amzn2.0.3 |
| Amazon Linux 2023 | fetchmail | 6.5.7-1.amzn2023.0.1 |
| Debian 12 | fetchmail | no fix |
| Debian 13 | fetchmail | no fix |
| Debian 14 | fetchmail | 6.6.8-1 |
| Rocky Linux 10 | fetchmail | 0:6.4.38-3.el10_2.1 |
| Rocky Linux 8 | fetchmail | 0:6.4.24-1.el8_10.1 |
| Rocky Linux 9 | fetchmail | 0:6.4.24-1.el9_8.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | fetchmail | 6.4.22-150600.35.6.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | fetchmail | 6.4.22-150600.35.6.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | fetchmail | 6.3.26-13.24.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | fetchmail | 6.4.22-150600.35.6.1 |
| SUSE Linux Enterprise Server 16.0 | fetchmail | 6.5.2-160000.4.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | fetchmail | 6.3.26-13.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | fetchmail | 6.4.22-150000.20.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | fetchmail | 6.4.22-150600.35.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | fetchmail | 6.5.2-160000.4.1 |
| Ubuntu 16.04 LTS | fetchmail | no fix |
| Ubuntu 18.04 LTS | fetchmail | no fix |
| Ubuntu 20.04 LTS | fetchmail | no fix |
| Ubuntu 22.04 LTS | fetchmail | no fix |
| Ubuntu 24.04 LTS | fetchmail | no fix |
| Ubuntu 26.04 LTS | fetchmail | no fix |
| Ubuntu 26.10 | fetchmail | no fix |
| openSUSE Leap 16.0 | fetchmail | 6.5.2-160000.4.1 |
| openSUSE Tumbleweed | fetchmail | 6.6.8-1.1 |